218 questions
5
votes
3
answers
397
views
How can you enable compiler warning on array argument decaying to pointer
I learned that in C++, array arguments decay to pointer arguments. As a result,
void PrintArray(int arr[4])
{
std::cout << arr[0] << std::endl;
std::cout << arr[1] << ...
- 247
0
votes
3
answers
96
views
Is it possible to have SQL Injection in Java PreparedStatement without setString() or setInt() methods? [duplicate]
In Java, if a user input is directly appended to an SQL query without using methods like setString() or setInt(), but the query is executed using a PreparedStatement, is it still considered SQL ...
0
votes
1
answer
169
views
Should both the sender's keypair and the recipient's keypair open a sodium crypto box?
I'm trying to understand sharing encrypted messages using PHP's sodium crypto box.
Using an example that I found somewhere I've tried to simulate a conversation between two people. They each have ...
- 58
0
votes
1
answer
170
views
Learning how to implement secure boot on an embedded system
I would like to learn how to implement secure boot on a device. I have a raspberry pi 2, and 3. I can get any board if it is required.
I have been working with embedded systems and embedded linux.
...
- 729
-1
votes
1
answer
66
views
Storing Database Password
If I save the password to the database as a hash in the configuration file of the application or in the code for security reasons, how does the application connect to the database if it does not ...
- 1
-1
votes
1
answer
352
views
CWE 201: fetch function
Veracode scan is showing a low level vulnerability in the fetch function. What's the best way to fix this?
const response = await fetch(url, {
method: 'POST',
headers: {
'Content-Type': '...
- 71
0
votes
1
answer
217
views
How to convert NSCoding to NSSecureCoding?
I got a message in log 'NSKeyedUnarchiveFromData' should not be used to for un-archiving and will be removed in a future release. I am not sure how to convert this class to use NSSecureCoding. I am ...
- 2,531
0
votes
0
answers
61
views
nonetype error when securing passwords in environment variables in windows 11
2023-10-17 00:21:31.357 Uncaught app exception
Traceback (most recent call last):
File "D:\pythonProject\portfolio\send_email.py", line 21, in send_email
server.login(username, password)
...
0
votes
0
answers
153
views
Clearing memory buffers securely to prevent data leaks in C
So I'm asking about this here purely because I can't find any guidelines/explanation for how this works anywhere else.
I am trying to clear a memory buffer after use to prevent a leak of highly ...
- 57
0
votes
1
answer
2k
views
Spring Boot 3 Security with JWT Verification without Users
I have a Microservice with an rest endpoint to receive data.
I will secure this endpoint not with a user/Password rather with an JWT Token. The secret from this token is known to this service.
I take ...
- 191
1
vote
1
answer
305
views
How to address CWE-502 for Swift's Codable
Snyk.io has alerted me to a CWE-502 issue with a Swift class that implements Codable.
Deserialization of untrusted data (CWE-502), is when the application
deserializes untrusted data without ...
- 16.3k
0
votes
0
answers
166
views
Deleting secure files if program crashes
I'm looking for way to delete secure files if a program were to crash in any way. Is there a way to do this in python?
I've been looking at the tempfile module to see if this were possible. Looking it ...
0
votes
0
answers
129
views
How to resolve Trust Bound Violation In Date parameter
Scan shows "Trust Bound Violation" in Session Variables for the below code.
How to sanitize or validate the below getDate()?
Not able to use the regular ESAPI validator as getDate() is type ...
0
votes
1
answer
252
views
How to add password to Tab in order to open it's content
Dears,
How to add password to Tab in order to open it's content ?
I want to keep Tab1(Mobiles) and Tab3 (Computers) accessible and the other ones request password each time we click on them :
Below is ...
- 31
0
votes
1
answer
636
views
I want API JSON response data but don't want it to be shown in network tab as its not specific to logged in user yet very sensitive?
So basically I have some information which I have gathered with lot of effort, this information is not specific to user so I cannot totally depend on my user logged in token, this is somewhat some ...
- 146