things that make a security officer cry
Monday, August 14th, 2006I spent a lot of time last week looking at an application in order to assess its security. The thing that was troubling me was that this is a web application and the primary form for data entry was defined like:
form name=”foo” method=”post” action=””
This means that the nothing happens when you hit submit on the [...]
