JavaScript Guy

Let's say that I have a long poll server which works as it should - when new client is connecte… Read more Long Polling Server Principle (client Authentication)

I have this regex: var alphaExp = /^[a-zA-ZåäöÅÄÖ\s]+$/; This is for a name-field in a form vali… Read more Include The Hyphen Into This Regular Expression, How?

I've noticed for a very long time that when you try to copy a link location or open a link on F… Read more Why Do Browsers Allow Onmousedown Js To Change Href?

Right now our application is designed to facilitate all communication via websockets after the init… Read more Securing Websockets

Starting a new Ember app and was prepared to follow token authentication type structure for authent… Read more Ember Best Practices For Loading Javascript/app Only After Authentication

My security team reported one html tag injection security issue for the below code function CloseP… Read more Html Tag Injection In Asp.net

For the passport input field: When the Solution 1: Short answer: It can not be prevented, unfor… Read more Prevent User To Find Password Through Firebug/chrome Dev Tools

I'm getting Client DOM Open Redirect security issue on scan for the following piece of code. Th… Read more Client Dom Open Redirect For Javascript

I have a html form which collects data in input elements and then generates a PDF (using jsPDF) for… Read more What Happens To Form / Javascript Data When Browser Window Is Closed?

I have a web application which is in php and java script. if someone tries to enter the path of th… Read more Deny Direct Access To Javascript Files In Iis Web Server

According to the spec (Annex C), strict-mode code can't do pretty much anything that might assi… Read more Why Does Ecmascript 5 Strict Mode Go To Such Great Lengths To Restrict The Identifier `eval`

I have a login system which is an html form and I need to send the username and password back to th… Read more How To Securely Pass Data From Php Forms To Html

The Context: You have a web server which has to provide an exclusive content only if your client h… Read more How To Check The Authenticity Of A Chrome Extension?

I have a window containing an iframe, containing an iframe, like so: +---------------+ | Top … Read more Why Can't An Iframe Set Its Parent's Location.hash?

I need to send an ajax POST request to my server. I'll need to make sure that the request origi… Read more Using Public/private Keys In Javascript

I am using javax.scripting to add support for running arbitrary user-uploaded JavaScripts on the se… Read more How Do I Secure Scripts Run Using Javax.scripting?

I don't know if this is really dangerous, but, as Google does it with its HTML and Javascript s… Read more Why Is It Dangerous To Render User-generated Html Or Javascript?

To make the question clear: is the proposal below considered 'secure'? (i.e. doesn't in… Read more Secure Browser-side Cache In Local Storage

Our web application (based on HTML5, SVG & JS) runs fine in all the browsers except Google Chro… Read more Unsafe Javascript Attempt To Access Frame In Google Chrome

I've made a simple web page for business clients that operates on MySQL database used mainly by… Read more Safe Mysql Password On Shared Hosting