Questions tagged [application-security]

Application layer security design, implementation, vulnerability assessments and concerns, as opposed to infrastructure (e.g., ACLs on routers, IDSes, etc.)

encompasses measures taken throughout the code's life-cycle to prevent gaps in the security policy of an application or the underlying system (vulnerabilities) through flaws in the design, development, deployment, upgrade, or maintenance or database of the application.

as stated in Wikipedia.

Since this tag is used in its general meaning, you are strongly encouraged to use one or more additional tags to better describe your specific case.

50 questions
0
votes
1 answer

Lan-based authentication of applications and secure channel

I've a server which authenticates clients applications and allows them to execute or not. I want to have a secure channel between server and clients. I've written my server with both ssl and ssh protocols but I don't know which one must be used in…
abdolahS
  • 663
  • 12
  • 35
0
votes
1 answer

security related to directories

How do you fix a directory traversal issue? Disable directory listing in Apache or IIS configuration Search replace ../ from the parameter Add a blank index.html file in the webroot Carry out input validation or use database tokens for files
0
votes
0 answers

What concerns could a network admin have around PrincipalContext ValidateCredentials?

I am writing a WPF C# application which will reside predominately on corporate laptops on a domain behind our firewall and using a combination of Security.Principal.WindowsIdentity.GetCurrent() and PrincipalContext.ValidateCredentials methods to…
0
votes
0 answers

Access Denied: You have not been setup to use this system VB.Net application

I have certain users accounts that are unable to run a VB.net application from our network drive. When the problem user account executes the Click-once application the program begins to execute creates the file lock on the ms access database but…
-1
votes
1 answer

Content-Security Header throwing me error

I am adding a Content-security-policy headers in my application by provide the following value of directive as the style-src:'unsafe-inline" script-src: www.googletagmanager; font-src: 'self' https://fonts.gstatic.com https://fonts.googleapis.com…
1 2 3
4