Tag Info

New answers tagged

-2

should I silently fail or explicitly inform the client of an error? Silently when dealing with attackers. Ideally you pretend success, so attackers won't change their strategy to something you can't handle.


4

The technique your boss has told you to use is one of the common ways of preventing cross site request forgery. I think you're probably getting confused by the multiple meanings of "hash" which in this case probably refers to a secure hash (eg SHA256) rather than a hash that you might use for a hash table.



Top 50 recent answers are included