Questions tagged [secure-coding]
147 questions
5
votes
2 answers
HTML Input of type text for passwords
A site (I won't name it) is using an input of type text for its password field in an HTML form. The onfocus method then changes those characters to dots.
Is there a security breach here ?
Or is it more secure than using an input of type password…
Philippe Carriere
- 153
- 1
- 5
4
votes
1 answer
What should a job description for a developer focused on secure coding practices look like?
Recently the organisation that I work for has approved a new role to be focused on ensuring technical solutions are following secure development practices at the code development level. While the candidate will be aware of network security, it will…
Andrew Conn
- 41
- 4
2
votes
1 answer
InfoSec consultancy - infrastructure vs development
I work for a company that has done in house application development (for our internal systems) since its inception decades ago. Recently, however, the rise of APIs and real-time data transfer has finally come to the attention of the higher-ups.…
Mike
- 25
- 4
2
votes
0 answers
How to secure/ensure a call from Excel AddIn to IIS Backend?
I need to develop an Excel AddIn which should gather a local information and send it to a backend system which is installed on an IIS (https). In general i want to use https but how can i ensure that the information which was send by the AddIn to…
STORM
- 121
- 3
0
votes
1 answer
Secure by Design vs Secure by Default
As an application developer, which of these two principles is considered more secure?
I'm familiar with these concepts at a foundational level. Secure by default means it's secure out the box. Secure by design means the software has been designed…
Charles Owen
- 121
- 2
0
votes
1 answer
security of swoopnow integration on website
We are planning to use swoopnow site apis (no-password) integration for our website.
(swoopnow provide apis which give user to login on site without any password)
However we are not sure about its api security…
shafiq
- 103
- 4