/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.smashingmagazine.com
Common Security Mistakes in Web Applications - Smashing Magazine
| | statuscode.ch
Security and Nextcloud 9 - Lukas' Random Thoughts
2.4 parsecs away

Travel
| | We're constantly working on adding more security features and hardenings to Nextcloud, after all it's your data and it has to be protected properly. While the Nextcloud 9 release fixes a critical security issue (we have informed upstream about this but in the meanwhile recommend upgrading as soon as possible) it also adds another new...
| | mathieu.fenniak.net
Is your Web API susceptible to a CSRF exploit? | Mathieu Fenniak
1.4 parsecs away

Travel
| | Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank:
| | www.redotheweb.com
Your API-Centric Web App Is Probably Not Safe Against XSS and CSRF
1.6 parsecs away

Travel
| | As we're reinventing web applications with SPAs and frontend frameworks, we need to reinvent web application security, too.
| | timtech.blog
CSRF When You Least Expect It.
8.8 parsecs away

Travel
| Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies.