/explore
|
You are here 
|
www.devsecurely.com | ||
| | | | |
www.sjoerdlangkemper.nl
In cross origin requests, the authorization header can be sent in two ways: either by the browser or specified along with the request. This article explains which CORS headers you need for each. |
|
| | | | | ||
| | | | |
www.redotheweb.com
As we're reinventing web applications with SPAs and frontend frameworks, we need to reinvent web application security, too. |
|
| | | | | ||
| | | | |
dzone.com
This post looks at Cross-Origin Resource Sharing (CORS) and the Same-Origin Policy to explore their impacts on app security, making security less restrictive. |
|
| | | | | ||
| | | | |
nv1t.github.io
I've identified a security concern within the self-hosted file sharing tool ProjectSend in the current version r1605. By exploiting a chain of vulnerabilities - including Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), and weaknesses in its change password implementation - an authenticated attacker can force a logged-in user to unknowingly change their account password, by clicking a link. But let me explain the attack in detail. |
|
| | | |||
