stefanorri

Joined 12 years ago

Karma

34

Submissions

13

Member since

Nov 5

http://www.debug.is [email protected]

View on Hacker News

Recent submissions

Comment · 2 years ago

Author here - I should maybe have made the disclaimer at the end more prominent - "All the bugs were discovered, verified, and reported. Any issued tickets were canceled and not used."

Planes, Ferries and Automobiles – How I Hacked Free Travel Across Iceland debug.is

5 stefanorri 2 years ago 2 comments

Don't let Content Security Policy fool you into a false sense of security debug.is

3 stefanorri 10 years ago 0 comments

Comment · 10 years ago

Thanks, glad to hear it!

Comment · 10 years ago

testssl.sh is also great for testing internal servers which aren't internet accessible.

Comment · 10 years ago

HTTPSecurityReport - https://httpsecurityreport.com - Disclaimer: I'm the creator.

Site Scan from MS - https://dev.windows.com/en-us/microsoft-edge/tools/staticsca...

Subresource Integrity scanner - https://sritest.io/

Show HN: HTTP Security Report – Test Your HTTP and HTML5 Security httpsecurityreport.com

2 stefanorri 11 years ago 0 comments

Unblocking Netflix Could Put You at Risk debug.is

2 stefanorri 11 years ago 0 comments

Show HN: HTTP Security Report - Analyzer for HTTP best practices httpsecurityreport.com

4 stefanorri 11 years ago 0 comments

HTTP Public Key Pinning Usage Is Essentially Zero debug.is

2 stefanorri 11 years ago 0 comments

Comment · 11 years ago

Good point. But the sandbox attribute is around 90% [1] of browsers. The number of browsers which don't support it and don't run javascript may be too low to make supporting them practical, but YMMV.

[1] http://caniuse.com/#feat=iframe-sandbox

Comment · 11 years ago

If you apply the sandbox attribute to the iframes it should be ok. It allows fine grained control of what the iframe is allowed to do. Scripts, navigation, popups, etc. are forbidden except explicitly allowed.

You've Been Framed. A survey of iframes and the sandbox attribute debug.is

33 stefanorri 11 years ago 14 comments