196 reputation
19
bio website ga.rethada.ms
location Guildford, United Kingdom
age 30
visits member for 4 years, 2 months
seen Oct 19 at 1:30

I'm just a web developer with a few ideas.


May
13
awarded  Caucus
May
1
awarded  Commentator
May
1
comment Using Google Maps as an input method
Are you assuming that the only location the user would ever enter is their current location?
Dec
6
awarded  Popular Question
Jul
23
awarded  Constituent
Jul
23
awarded  Caucus
May
27
awarded  Citizen Patrol
May
27
comment Displaying urls with case sensitivity
At the least, this should have been a comment on the other answer as it's not an answer to the question itself
May
1
awarded  Teacher
May
1
answered SSL between customer's domain having CNAME to our secured server?
Apr
3
comment Is there a class or id that will cause an ad to be blocked by most major adblockers?
Google might suggest using <div> to put ads in, but it doesn't follow that you can assume all <div> usage is for adverts. The number of false positives for rel="nofollow" would still be pretty huge
Apr
3
comment Are logos really free to use?
Be clear that "well, everyone else is doing it" is not a valid defence if you ever do get chased down by lawyers, it's only a factor for justifying why you might ignore the potential legal issues in the first place
Mar
7
comment Searching a query with Asterisk as * on Google
That's quite a detailed answer, but it doesn't mention how to treat asterisks as asterisks, rather than wildcards
Feb
24
comment Using wildcard certificates for multi-server deployment
Digicert certificates will also secure the base domain (i.e. no subdomain) which most other providers need you to buy an additional certificate for
Feb
21
comment Should <a> tags with href=“#” (or other internal links) use rel=“noindex, nofollow”?
@Anagio The stupid thing is using <a href="#"> for links that aren't really links (probably they're just javascript hooks). No one is saying there's anything wrong with anchors in general
Jan
26
comment How can mixed content compromise an entire HTTPS session?
Setting a secure-only session ID cookie will mean that the application simply won't work if there's a need to switch between secure and non-secure pages. I was talking about owasp.org/index.php/HttpOnly
Jan
25
comment How can mixed content compromise an entire HTTPS session?
I'll post the results when I get some time to test it, but Chrome definitely keeps the session cookie for longer than any individual tab is open - until the whole browser is quit as far as I know
Jan
25
comment How can mixed content compromise an entire HTTPS session?
That's a good point, I'd not considered access to cookie-based session IDs. I'll run some tests with HTTPOnly cookies (which aren't available to javascript) and see if that holds. However, if this is the reason, Chrome seems to be inconsistent in its behaviour, because closing a tab and reopening it clears the "taintedness" of the session, whereas the problem you describe would still exist.
Jan
25
awarded  Student
Jan
25
asked How can mixed content compromise an entire HTTPS session?