JavaScript Info

I'm getting Client DOM Open Redirect security issue on scan for the following piece of code. Th… Read more Client Dom Open Redirect For Javascript

Is there any solution for secure user registration and authentication without SSL? With 'secur… Read more Established Javascript Solution For Secure Registration & Authentication Without Ssl

I need to send an ajax POST request to my server. I'll need to make sure that the request origi… Read more Using Public/private Keys In Javascript

Is it possible to use jsrsasign to extract the fingerprint of an x.509 certficate, similar to what … Read more Jsrsasign - How To Extract An X.509 Certificate's Fingerprint?

Recently I worked on a library that supports using workers for some heavy lifting. I found out that… Read more Why Are Cross Origin Workers Blocked And Why Is The Workaround Ok?

I'm using the client-side Cognito Javascript SDK. Part of the setup requires configuring regio… Read more Is It Safe To Expose The Aws Cognito Ids?

I'm thinking about trying Firebase and have spent the day looking at example projects and the d… Read more Understanding Securing Firebase Code

Well not exactly. If I just draw (ex lines,rect...) and try to export the canvas as an image. It wo… Read more Get Security Error When Saving Canvas Object Into An Image

with the DOM and cool new tools such as reactjs, should innerHTML ever be used in a javascript prog… Read more In General, In Javascript, Isn't Using Innerhtml An [in]security Issue?

Here's the summary of my code: My website basically just loops the content of all the rows of … Read more Is It Safe To Put An ID (will Insert In DB) Into A Hidden Input?

Starting a new Ember app and was prepared to follow token authentication type structure for authent… Read more Ember Best Practices For Loading Javascript/app Only After Authentication

Is there any way to prevent a user from overriding a native function? Example: var getRand; (functi… Read more Can I Protect Native JavaScript Functions

Right now our application is designed to facilitate all communication via websockets after the init… Read more Securing Websockets