Y. E. Liang - JavaScript Security [2014, PDF, ENG] + Code

seeders: 5
leechers: 0
Added 11 years ago by D@vidoff in Books  > Non-Fiction

Download Fast Safe Anonymous
movies, software, shows...

Files

Y. E. Liang - JavaScript Security [2014, PDF, ENG] + Code (Size: 6.74 MB)
  Code
  Chapter 1
  Chapter 1
  chapter1
  animation.html 571 B
  chained.html 596 B
  chained1.html 597 B
  hide_show.html 550 B
  toggle.html 490 B
  Chapter 2
  chapter2
  .DS_Store 12 KB
  external
  external_node.html 3.14 KB
  node
  README.md 542 B
  app
  models
  todo.js 212 B
  package.json 206 B
  server.js 1.29 KB
  server_secure.js 1.38 KB
  todos.html 5.33 KB
  todos_secure.html 5.76 KB
  Chapter 3
  chapter3
  .DS_Store 6 KB
  python_server
  server.py 2.42 KB
  static
  css
  custom.css 1.38 KB
  templates
  external.html 3.1 KB
  todos.html 5.22 KB
  todos_secure.html 6.09 KB
  Chapter 4
  Chapter4
  .DS_Store 6 KB
  chp4
  .DS_Store 12 KB
  node
  .gitignore 535 B
  README.md 542 B
  app
  models
  todo.js 212 B
  node_modules
  body-parser
  .npmignore 5 B
  .travis.yml 35 B
  HISTORY.md 139 B
  Makefile 113 B
  README.md 2 KB
  index.js 2.14 KB
  node_modules
  qs
  .gitmodules 207 B
  .npmignore 77 B
  Readme.md 1.88 KB
  index.js 7.19 KB
  package.json 2.7 KB
  raw-body
  .npmignore 18 B
  Makefile 195 B
  README.md 3.27 KB
  index.js 4.34 KB
  node_modules
  bytes
  .npmignore 5 B
  History.md 360 B
  Makefile 89 B
  Readme.md 1.39 KB
  component.json 164 B
  index.js 947 B
  package.json 2.29 KB
  package.json 4.45 KB
  type-is
  .npmignore 7 B
  .travis.yml 44 B
  HISTORY.md 244 B
  README.md 2.65 KB
  index.js 3.81 KB
  node_modules
  mime
  LICENSE 1.05 KB
  README.md 2.18 KB
  mime.js 2.79 KB
  package.json 3.06 KB
  test.js 2.68 KB
  types
  mime.types 51.77 KB
  node.types 2.51 KB
  package.json 3.6 KB
  package.json 3.01 KB
  cookie-session
  Readme.md 4.09 KB
  index.js 4.53 KB
  node_modules
  cookies
  .npmignore 13 B
  .travis.yml 44 B
  History.md 92 B
  LICENSE.txt 1.07 KB
  README.md 6.69 KB
  lib
  cookies.js 3.76 KB
  node_modules
  keygrip
  .npmignore 34 B
  .travis.yml 43 B
  LICENSE.txt 1.06 KB
  README.md 3.51 KB
  index.js 1.55 KB
  package.json 4.34 KB
  test.js 1.6 KB
  package.json 7.98 KB
  test
  express.js 2.49 KB
  http.js 2.52 KB
  restify.js 2.49 KB
  debug
  Readme.md 4.26 KB
  debug.js 2.4 KB
  lib
  debug.js 2.51 KB
  package.json 5.23 KB
  package.json 5.15 KB
  csrf
  .npmignore 14 B
  .travis.yml 35 B
  README.md 2.6 KB
  index.js 39 B
  lib
  csrf.js 2.65 KB
  node_modules
  crypto
  .md5.js.un~ 605 B
  .package.json.un~ 11.55 KB
  .sha1.js.un~ 599 B
  History.md 60 B
  Readme.md 128 B
  md5.js 11.8 KB
  package.json 1.16 KB
  sha1.js 5.76 KB
  test
  test-crypto.js 75 B
  underscore
  .npmignore 20 B
  CNAME 17 B
  LICENSE 1.05 KB
  README.md 1.29 KB
  favicon.ico 1.37 KB
  index.html 74.68 KB
  index.js 42 B
  package.json 2.21 KB
  raw
  underscore.psd 210.49 KB
  underscore-min.js 12.52 KB
  underscore.js 36.51 KB
  package.json 3.76 KB
  test.js 2.78 KB
  express
  .npmignore 80 B
  .travis.yml 38 B
  History.md 42.92 KB
  LICENSE 1.08 KB
  Makefile 598 B
  Readme.md 3.53 KB
  benchmarks
  Makefile 201 B
  middleware.js 371 B
  run 196 B
  index.js 104 B
  lib
  application.js 11.76 KB
  express.js 1.69 KB
  middleware
  init.js 570 B
  query.js 782 B
  request.js 9.09 KB
  response.js 17.66 KB
  router
  index.js 8.88 KB
  layer.js 1.18 KB
  route.js 3.7 KB
  utils.js 2.09 KB
  view.js 1.78 KB
  node_modules
  accepts
  .npmignore 718 B
  .travis.yml 44 B
  Makefile 102 B
  README.md 3.2 KB
  index.js 3.84 KB
  node_modules
  mime
  LICENSE 1.05 KB
  README.md 2.18 KB
  mime.js 2.79 KB
  package.json 3.06 KB
  test.js 2.68 KB
  types
  mime.types 51.77 KB
  node.types 2.51 KB
  negotiator
  LICENSE 1.14 KB
  examples
  accept.js 1.23 KB
  charset.js 1.3 KB
  encoding.js 1.31 KB
  language.js 1.1 KB
  lib
  charset.js 1.61 KB
  encoding.js 1.95 KB
  language.js 2.09 KB
  mediaType.js 2.12 KB
  negotiator.js 902 B
  package.json 4.52 KB
  readme.md 3.34 KB
  test
  charset.js 1.78 KB
  encoding.js 2.14 KB
  language.js 1.88 KB
  mediaType.js 2.14 KB
  package.json 4.16 KB
  test
  charset.js 1.75 KB
  encoding.js 1.31 KB
  language.js 1.65 KB
  type.js 3.21 KB
  buffer-crc32
  .npmignore 12 B
  .travis.yml 116 B
  README.md 1.42 KB
  index.js 3.82 KB
  package.json 2.5 KB
  tests
  crc.test.js 2.14 KB
  cookie
  .npmignore 13 B
  .travis.yml 64 B
  LICENSE 1.06 KB
  README.md 1.08 KB
  index.js 1.85 KB
  package.json 1.99 KB
  test
  mocha.opts 11 B
  parse.js 1.33 KB
  serialize.js 1.53 KB
  cookie-signature
  .npmignore 29 B
  History.md 370 B
  Makefile 89 B
  Readme.md 1.46 KB
  index.js 1.05 KB
  package.json 2.36 KB
  debug
  Readme.md 4.26 KB
  debug.js 2.4 KB
  lib
  debug.js 2.51 KB
  package.json 5.23 KB
  escape-html
  .npmignore 17 B
  Makefile 139 B
  Readme.md 130 B
  component.json 193 B
  index.js 329 B
  package.json 911 B
  fresh
  .npmignore 5 B
  History.md 169 B
  Makefile 89 B
  Readme.md 1.58 KB
  index.js 1.2 KB
  package.json 2.55 KB
  merge-descriptors
  .npmignore 592 B
  README.md 1.48 KB
  component.json 203 B
  index.js 235 B
  package.json 2.33 KB
  methods
  History.md 69 B
  Readme.md 59 B
  index.js 468 B
  package.json 722 B
  parseurl
  .npmignore 593 B
  README.md 1.22 KB
  index.js 582 B
  package.json 1.97 KB
  path-to-regexp
  .npmignore 22 B
  History.md 180 B
  Readme.md 1.01 KB
  component.json 242 B
  index.js 1.45 KB
  package.json 1.92 KB
  test.js 13.45 KB
  qs
  .gitmodules 207 B
  .npmignore 77 B
  Readme.md 1.88 KB
  index.js 7.19 KB
  package.json 2.7 KB
  range-parser
  .npmignore 5 B
  History.md 331 B
  Makefile 89 B
  Readme.md 2.17 KB
  index.js 920 B
  package.json 3.17 KB
  send
  .npmignore 29 B
  History.md 710 B
  Makefile 100 B
  Readme.md 3.6 KB
  index.js 40 B
  lib
  send.js 9.5 KB
  utils.js 799 B
  node_modules
  mime
  LICENSE 1.05 KB
  README.md 2.18 KB
  mime.js 2.79 KB
  package.json 3.06 KB
  test.js 2.68 KB
  types
  mime.types 51.77 KB
  node.types 2.51 KB
  package.json 4.72 KB
  serve-static
  .npmignore 5 B
  .travis.yml 48 B
  LICENSE 1.16 KB
  Readme.md 1.32 KB
  index.js 2.92 KB
  node_modules
  send
  .npmignore 29 B
  History.md 637 B
  Makefile 100 B
  Readme.md 3.6 KB
  index.js 40 B
  lib
  send.js 9.5 KB
  utils.js 799 B
  node_modules
  fresh
  .npmignore 5 B
  History.md 76 B
  Makefile 89 B
  Readme.md 1.58 KB
  index.js 1.2 KB
  package.json 2.78 KB
  mime
  LICENSE 1.05 KB
  README.md 2.18 KB
  mime.js 2.79 KB
  package.json 3.06 KB
  test.js 2.68 KB
  types
  mime.types 51.77 KB
  node.types 2.51 KB
  range-parser
  .npmignore 5 B
  History.md 238 B
  Makefile 89 B
  Readme.md 1.08 KB
  index.js 920 B
  package.json 2.21 KB
  package.json 5.08 KB
  package.json 2.33 KB
  type-is
  .npmignore 7 B
  .travis.yml 44 B
  Makefile 102 B
  README.md 2.07 KB
  index.js 2.24 KB
  node_modules
  mime
  LICENSE 1.05 KB
  README.md 2.18 KB
  mime.js 2.79 KB
  package.json 3.06 KB
  test.js 2.68 KB
  types
  mime.types 51.77 KB
  node.types 2.51 KB
  package.json 2.96 KB
  utils-merge
  .travis.yml 70 B
  LICENSE 1.05 KB
  README.md 634 B
  index.js 381 B
  package.json 1.73 KB
  package.json 5.94 KB
  mongoose
  .npmignore 113 B
  .travis.yml 74 B
  CONTRIBUTING.md 4.91 KB
  History.md 59.02 KB
  README.md 9.63 KB
  examples
  README.md 940 B
  doc-methods.js 1.23 KB
  population-across-three-collections.js 2.58 KB
  population-basic.js 1.76 KB
  population-of-existing-doc.js 1.96 KB
  population-of-multiple-existing-docs.js 2.23 KB
  population-options.js 2.44 KB
  population-plain-objects.js 1.84 KB
  schema.js 1.88 KB
  index.js 72 B
  lib
  collection.js 3.55 KB
  connection.js 17.89 KB
  connectionstate.js 520 B
  document.js 42.65 KB
  drivers
  SPEC.md 21 B
  node-mongodb-native
  binary.js 119 B
  collection.js 5.45 KB
  connection.js 7.4 KB
  objectid.js 660 B
  error.js 1023 B
  errors
  cast.js 649 B
  divergentArray.js 1.05 KB
  document.js 493 B
  missingSchema.js 598 B
  overwriteModel.js 533 B
  validation.js 890 B
  validator.js 917 B
  version.js 485 B
  index.js 14.62 KB
  internal.js 897 B
  model.js 62.64 KB
  namedscope.js 1.66 KB
  promise.js 6.23 KB
  query.js 66.45 KB
  queryhelpers.js 641 B
  querystream.js 7.55 KB
  schema
  array.js 7.44 KB
  boolean.js 1.49 KB
  buffer.js 3.62 KB
  date.js 3.25 KB
  documentarray.js 4.38 KB
  embedded.js 832 B
  index.js 498 B
  mixed.js 1.39 KB
  number.js 4.83 KB
  objectid.js 3.68 KB
  string.js 6.79 KB
  schema.js 21.38 KB
  schemadefault.js 662 B
  schematype.js 17.44 KB
  statemachine.js 4.29 KB
  types
  array.js 16.96 KB
  buffer.js 4.21 KB
  documentarray.js 4.31 KB
  embedded.js 5.06 KB
  index.js 274 B
  objectid.js 681 B
  utils.js 13.66 KB
  virtualtype.js 1.99 KB
  node_modules
  hooks
  .npmignore 20 B
  Makefile 155 B
  README.md 12.13 KB
  hooks.alt.js 4.01 KB
  hooks.js 5.26 KB
  package.json 13.55 KB
  test.js 18.29 KB
  mongodb
  .travis.yml 97 B
  CONTRIBUTING.md 1.9 KB
  LICENSE 11.09 KB
  Makefile 487 B
  Readme.md 14.71 KB
  index.js 43 B
  lib
  mongodb
  admin.js 12.8 KB
  auth
  mongodb_cr.js 2.23 KB
  mongodb_gssapi.js 5.13 KB
  mongodb_plain.js 2.2 KB
  mongodb_sspi.js 4.76 KB
  collection.js 70.8 KB
  commands
  base_command.js 769 B
  db_command.js 9.53 KB
  delete_command.js 4.63 KB
  get_more_command.js 3 KB
  insert_command.js 5.82 KB
  kill_cursor_command.js 3.27 KB
  query_command.js 10.58 KB
  update_command.js 7.21 KB
  connection
  base.js 12.03 KB
  connection.js 18.93 KB
  connection_pool.js 9 KB
  connection_utils.js 1.05 KB
  mongos.js 16.74 KB
  read_preference.js 2.06 KB
  repl_set
  ha.js 13.39 KB
  options.js 4.61 KB
  repl_set.js 29.33 KB
  repl_set_state.js 1.65 KB
  strategies
  ping_strategy.js 11.04 KB
  statistics_strategy.js 2.9 KB
  server.js 33.37 KB
  url_parser.js 8.53 KB
  cursor.js 33.4 KB
  cursorstream.js 3.54 KB
  db.js 79.7 KB
  gridfs
  chunk.js 6.76 KB
  grid.js 3.58 KB
  gridstore.js 51.51 KB
  readstream.js 4.53 KB
  index.js 1.71 KB
  mongo_client.js 16.5 KB
  responses
  mongo_reply.js 3.7 KB
  utils.js 4.36 KB
  node_modules
  bson
  .travis.yml 96 B
  Makefile 294 B
  README.md 2.11 KB
  binding.gyp 336 B
  browser_build
  bson.js 152.79 KB
  package.json 370 B
  build
  Makefile 13.45 KB
  Release
  bson.node 48.86 KB
  deps
  Release
  bson.node.d 238 B
  obj.target
  bson
  ext
  bson.o.d 1.87 KB
  linker.lock 0 B
  obj.target
  bson
  ext
  bson.o 251.08 KB
  binding.Makefile 112 B
  bson.target.mk 3.74 KB
  config.gypi 3.01 KB
  gyp-mac-tool 18.89 KB
  build_browser.js 139 B
  builderror.log 0 B
  ext
  Makefile 594 B
  bson.cc 34.44 KB
  bson.h 10.92 KB
  index.js 1.2 KB
  win32
  ia32
  bson.node 111 KB
  x64
  bson.node 127.5 KB
  wscript 1.15 KB
  lib
  bson
  binary.js 10.06 KB
  binary_parser.js 12.08 KB
  bson.js 63.91 KB
  code.js 563 B
  db_ref.js 723 B
  double.js 631 B
  float_parser.js 3.82 KB
  index.js 1.45 KB
  long.js 22.54 KB
  max_key.js 259 B
  min_key.js 257 B
  objectid.js 7.19 KB
  symbol.js 819 B
  timestamp.js 23.73 KB
  package.json 3.4 KB
  tools
  gleak.js 662 B
  jasmine-1.1.0
  MIT.LICENSE 1.04 KB
  jasmine-html.js 6.77 KB
  jasmine.css 2.07 KB
  jasmine.js 65.19 KB
  jasmine_favicon.png 905 B
  kerberos
  LICENSE 11.09 KB
  README.md 47 B
  binding.gyp 1.12 KB
  build
  Makefile 13.47 KB
  Release
  deps
  Release
  kerberos.node.d 440 B
  obj.target
  kerberos
  lib
  base64.o.d 686 B
  kerberos.o.d 1.85 KB
  kerberos_context.o.d 1.84 KB
  kerberosgss.o.d 768 B
  worker.o.d 1.7 KB
  kerberos.node 46.08 KB
  linker.lock 0 B
  obj.target
  kerberos
  lib
  base64.o 5.7 KB
  kerberos.o 132.32 KB
  kerberos_context.o 76.11 KB
  kerberosgss.o 16.36 KB
  worker.o 43.45 KB
  binding.Makefile 116 B
  config.gypi 3.01 KB
  gyp-mac-tool 18.89 KB
  kerberos.target.mk 4.27 KB
  builderror.log 12.42 KB
  index.js 211 B
  lib
  auth_processes
  mongodb.js 9.39 KB
  base64.c 3.59 KB
  base64.h 746 B
  kerberos.cc 19.62 KB
  kerberos.h 1.12 KB
  kerberos.js 3.02 KB
  kerberos_context.cc 2.01 KB
  kerberos_context.h 1.07 KB
  kerberosgss.c 20.54 KB
  kerberosgss.h 2.41 KB
  sspi.js 730 B
  win32
  base64.c 3.6 KB
  base64.h 746 B
  kerberos.cc 1.63 KB
  kerberos.h 1.38 KB
  kerberos_sspi.c 7.29 KB
  kerberos_sspi.h 3.54 KB
  worker.cc 66 B
  worker.h 734 B
  wrappers
  security_buffer.cc 3.5 KB
  security_buffer.h 1.11 KB
  security_buffer.js 397 B
  security_buffer_descriptor.cc 5.91 KB
  security_buffer_descriptor.h 1.1 KB
  security_buffer_descriptor.js 201 B
  security_context.cc 41.73 KB
  security_context.h 2.42 KB
  security_context.js 165 B
  security_credentials.cc 16.88 KB
  security_credentials.h 1.64 KB
  security_credentials.js 760 B
  worker.cc 66 B
  worker.h 798 B
  package.json 1014 B
  test
  kerberos_tests.js 1.01 KB
  kerberos_win32_test.js 680 B
  win32
  security_buffer_descriptor_tests.js 1.55 KB
  security_buffer_tests.js 654 B
  security_credentials_tests.js 1.93 KB
  package.json 18.81 KB
  t.js 5.63 KB
  mpath
  .npmignore 20 B
  .travis.yml 41 B
  History.md 266 B
  LICENSE 1.09 KB
  Makefile 60 B
  README.md 6.78 KB
  index.js 45 B
  lib
  index.js 4.49 KB
  package.json 7.88 KB
  test
  index.js 53.95 KB
  mpromise
  .npmignore 20 B
  .travis.yml 41 B
  History.md 333 B
  LICENSE 1.09 KB
  Makefile 294 B
  README.md 5.21 KB
  index.js 53 B
  lib
  promise.js 6.48 KB
  node_modules
  sliced
  .npmignore 20 B
  .travis.yml 43 B
  History.md 402 B
  LICENSE 1.09 KB
  Makefile 68 B
  README.md 2.48 KB
  bench.js 3.09 KB
  component.json 313 B
  index.js 52 B
  lib
  sliced.js 637 B
  package.json 3.42 KB
  test
  index.js 2.31 KB
  package.json 6.36 KB
  test
  promise.test.js 4.28 KB
  promises-A.js 587 B
  ms
  .gitignore 13 B
  Makefile 109 B
  README.md 1.98 KB
  ms.js 649 B
  package.json 2.44 KB
  test
  index.html 496 B
  support
  jquery.js 242.42 KB
  test.js 1.18 KB
  muri
  .npmignore 20 B
  .travis.yml 41 B
  History.md 743 B
  LICENSE 1.09 KB
  Makefile 57 B
  README.md 1.36 KB
  index.js 45 B
  lib
  index.js 3.96 KB
  package.json 2.2 KB
  test
  index.js 11.66 KB
  regexp-clone
  .npmignore 20 B
  .travis.yml 52 B
  History.md 59 B
  LICENSE 1.09 KB
  Makefile 76 B
  README.md 313 B
  index.js 463 B
  package.json 1.17 KB
  test
  index.js 2.26 KB
  sliced
  .npmignore 20 B
  .travis.yml 43 B
  History.md 624 B
  LICENSE 1.09 KB
  Makefile 63 B
  README.md 2.48 KB
  bench.js 3.09 KB
  component.json 357 B
  index.js 52 B
  lib
  sliced.js 565 B
  package.json 3.42 KB
  test
  index.js 2.31 KB
  package.json 11.36 KB
  static.js 507 B
  website.js 1.89 KB
  morgan
  .npmignore 18 B
  History.md 193 B
  README.md 3.28 KB
  index.js 5.54 KB
  node_modules
  bytes
  .npmignore 5 B
  History.md 286 B
  Makefile 89 B
  Readme.md 1.39 KB
  component.json 164 B
  index.js 920 B
  package.json 2.29 KB
  package.json 4.3 KB
  package.json 206 B
  server.js 1.31 KB
  server_secure.js 1.38 KB
  todos.html 5.23 KB
  todos_secure.html 5.96 KB
  python_tornado
  server.py 2.45 KB
  static
  css
  custom.css 1.38 KB
  templates
  external.html 4.05 KB
  todos.html 5.2 KB
  xss_version.py 2.81 KB
  Chapter 5
  chapter5
  .DS_Store 6 KB
  chp5
  .DS_Store 6 KB
  mistrust
  mistrust.py 1.2 KB
  mistrust2.py 1.46 KB
  templates
  mistrust.html 4.03 KB
  Chapter 6
  chapter6
  intercept.html 1.71 KB
  Y. E. Liang - JavaScript Security - 2014.pdf 2.46 MB

Description


Книги и журналы » Компьютерная литература » Веб-дизайн и программирование

JavaScript Security

Год: 2014
Автор: Y. E. Liang
Издательство: Packt Publishing
ISBN: 978-1-78398-801-3
Язык: Английский
Формат: PDF
Качество: Изначально компьютерное (eBook)
Количество страниц: 112
Описание:

This book starts off with an introduction to JavaScript security and gives you an overview of the basic functions JavaScript can perform on the Web, both on the client side and the server side. It demonstrates a couple of ways in which RESTful APIs can be laden with security flaws. You will also create a simple RESTful server using Express.js and Node.js. You will then focus on one of the most common JavaScript security attacks, cross-site scripting, and how to prevent cross-site scripting and cross-site forgery.

Last but not least, the book covers JavaScript phishing, how it works, and ways to counter it.

By the end of this book, you will be able to identify various risks of JavaScript and how to prevent them.
[spoiler="Примеры страниц"]

[/spoiler]
[spoiler="Оглавление"]
Preface
Chapter 1: JavaScript and the Web

JavaScript and your HTML/CSS elements
jQuery effects
Hide/Show
Toggle
Animation
Chaining
jQuery Ajax
jQuery GET
jQuery getJSON
jQuery POST
JavaScript beyond the client
JavaScript on the server side
Full-stack JavaScript
JavaScript security issues
Cross-site request forgery
Cross-site scripting
Chapter 2: Secure Ajax RESTful APIs
Building a RESTful server
A simple RESTful server in Node.js and Express.js
Frontend code for the to-do list app on top of Express.js
Cross-origin injection
Injecting JavaScript code
Guessing the API endpoints
Basic defense against similar attacks
Chapter 3: Cross-site Scripting
What is cross-site scripting?
Persistent cross-site scripting
Nonpersistent cross-site scripting
Examples of cross-site scripting
A simple to-do app using Tornado/Python
Coding up server.py
Cross-site scripting example 1
Cross-site scripting example 2
Cross-site scripting example 3
Defending against cross-site scripting
Do not trust users – parsing input by users
Chapter 4: Cross-site Request Forgery
Introducing cross-site request forgery
Examples of CSRF
Basic defense against CSRF attacks
Other examples of CSRF
CSRF using the tags
Other forms of protection
Creating your own app ID and app secret – OAuth-styled
Checking the Origin header
Limiting the lifetime of the token
Chapter 5: Misplaced Trust in the Client
When trust gets misplaced
A simple example
Building the server side – mistrust.py
The templates
To trust or not to trust
Manipulating the JavaScript code
Dealing with mistrust
Chapter 6: JavaScript Phishing
What is JavaScript phishing?
Examples of JavaScript phishing
Classic examples
Accessing user history by accessing the local state
XSS and CSRF
Intercepting events
Defending against JavaScript phishing
Upgrading to latest versions of web browsers
Recognizing real web pages
Protecting your site against XSS and CSRF
Avoid using pop ups and keep your address bars
Index
[/spoiler]

Related Torrents

torrent name size uploader age seed leech
1
1
0
0
0