| Title: | Is Your Online Store Vulnerable To CSRF and XSS Attacks? |
| URL: | http://www.rimmkaufman.com/rkgblog/2008/11/07/csrf-and-xss/ |
| Printed: | July 4, 2009 |
| Source: | The Rimm-Kaufman Group Blog, info@rimmkaufman.com |
- November 7, 2008
- 0 comments
Ing Direct. New York Times. YouTube. Digg. Google.
These (and many other well-engineered sites) have been compromised by XSS and CSRF attacks in the last 18 months.
Here’s an excellent technical powerpoint discussing these newer categories of security threats.
Whether you are running home-brew code or using a third party platform, your site faces these dangers.
Marketing folks, check with your technical teams to ensure your site is doing all it can to avoid these vulnerabilities.
If you like this post, consider subscribing to our RSS feed. You can also have new posts sent to you via email.
Related Posts
- 11% of Sites Vulnerable To SQL Injection: Is Yours? Preventing SQL injection isn't all that hard -- yet 11% of sites haven't got it right yet....
- Zappos: We Think You’re A Shoe Store And That’s OK I'd respectfully disagree that Zappos is a "service company that happens to sell shoes." ...
- Google’s “Store” Tag: The Role of Paid Vs. Free Search Once on a visit to Google, I heard a senior exec describe Google's take on relationship between paid and natural search. This was some time...
- AJAX for Keeping Online Retail SKU Pages Fresh IntraDay Crazy idea for a e-comm architecture: render the whole site in static HTML each evening, with prices and quantities accurate as of when written. Then...
No Comments Yet
Your comment will be first!
Your Comment