Skip to main content
Gabor Lengyel's user avatar
Gabor Lengyel's user avatar
Gabor Lengyel's user avatar
Gabor Lengyel
Security Architect
  • Member for 8 years
  • Last seen this week
Profile Activity
Stats
15,050
reputation
669k
reached
452
answers
5
questions
Communities
View all
About

Security architect, application security enthusiast and OWASP supporter

I have developed some fairly complex applications as a hobby for 15+ years mostly in Ruby, Javascript, Java, PHP and C# (and some more).

I share knowledge on how to secure applications and how to write more secure code. Also I find vulnerabilities here and there before others do.

I will get emails sent to appsecgabor (with @gmail and .com appended to it). Hello email scraper bots.

Badges
View all badges
4
gold badges
37
silver badges
62
bronze badges
Top tags
View all tags
931
Score
379
Posts
83
Posts %
181
Score
60
Posts
13
Posts %
130
Score
37
Posts
8
Posts %
115
Score
39
Posts
9
Posts %
76
Score
45
Posts
10
Posts %
68
Score
59
Posts
13
Posts %
Top posts
View all questions, answers, and articles
33
How to pass CSRF token from server to client?
Jun 7, 2018
29
CSRF Double Submit Cookie is basically "not Secure"
Jan 24, 2021
29
Is it insecure to include your login page in your single page application?
Nov 5, 2018
27
express-session secure: true
Oct 29, 2016
25
In Ruby, how to convert special characters like ë,à,é,ä all to e,a,e,a?
Sep 9, 2016
23
Access token vs username/password for API request
Dec 25, 2018
21
How to check if email actually exists
Nov 17, 2016
21
How safe are extensions in Visual Studio code?
May 11, 2021
20
How services generate and use public and secret API keys?
Apr 7, 2021
18
Why can't a malicious site obtain a CSRF token via GET before attacking?
Nov 28, 2016
Top network posts
View all network posts
23
Is Certificate validation done completely local?
8
Why are only passwords hashed?
6
How should Rails be set up with an SPA client like Aurelia?