meta user
network profile
| bio | website | ga.rethada.ms |
|---|---|---|
| location | Guildford, United Kingdom | |
| age | 29 | |
| visits | member for | 2 years, 7 months |
| seen | May 13 at 21:04 | |
| stats | profile views | 5 |
I'm just a web developer with a few ideas.
|
May 13 |
awarded | Caucus |
|
May 1 |
awarded | Commentator |
|
May 1 |
comment |
Using google maps as an input method Are you assuming that the only location the user would ever enter is their current location? |
|
Dec 6 |
awarded | Popular Question |
|
Jul 23 |
awarded | Constituent |
|
Jul 23 |
awarded | Caucus |
|
May 27 |
awarded | Citizen Patrol |
|
May 27 |
comment |
Displaying urls with case sensitivity At the least, this should have been a comment on the other answer as it's not an answer to the question itself |
|
May 1 |
awarded | Teacher |
|
May 1 |
answered | SSL between customer's domain having CNAME to our secured server? |
|
Apr 3 |
comment |
Is there a class or id that will cause an ad to be blocked by most major adblockers? Google might suggest using <div> to put ads in, but it doesn't follow that you can assume all <div> usage is for adverts. The number of false positives for rel="nofollow" would still be pretty huge |
|
Apr 3 |
comment |
Are logos really free to use? Be clear that "well, everyone else is doing it" is not a valid defence if you ever do get chased down by lawyers, it's only a factor for justifying why you might ignore the potential legal issues in the first place |
|
Mar 7 |
comment |
Searching a query with Asterisk as * on Google That's quite a detailed answer, but it doesn't mention how to treat asterisks as asterisks, rather than wildcards |
|
Feb 24 |
comment |
Using wildcard certificates for multi-server deployment Digicert certificates will also secure the base domain (i.e. no subdomain) which most other providers need you to buy an additional certificate for |
|
Feb 21 |
comment |
Should <a> tags with href=“#” (or other internal links) use rel=“noindex, nofollow”? @Anagio The stupid thing is using <a href="#"> for links that aren't really links (probably they're just javascript hooks). No one is saying there's anything wrong with anchors in general |
|
Jan 26 |
comment |
How can mixed content compromise an entire HTTPS session? Setting a secure-only session ID cookie will mean that the application simply won't work if there's a need to switch between secure and non-secure pages. I was talking about owasp.org/index.php/HttpOnly |
|
Jan 25 |
comment |
How can mixed content compromise an entire HTTPS session? I'll post the results when I get some time to test it, but Chrome definitely keeps the session cookie for longer than any individual tab is open - until the whole browser is quit as far as I know |
|
Jan 25 |
comment |
How can mixed content compromise an entire HTTPS session? That's a good point, I'd not considered access to cookie-based session IDs. I'll run some tests with HTTPOnly cookies (which aren't available to javascript) and see if that holds. However, if this is the reason, Chrome seems to be inconsistent in its behaviour, because closing a tab and reopening it clears the "taintedness" of the session, whereas the problem you describe would still exist. |
|
Jan 25 |
awarded | Student |
|
Jan 25 |
asked | How can mixed content compromise an entire HTTPS session? |
