Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		marcus-obst.de JSON Path with Alpine.js CSP build in Postman Visualizer \| Marcus Obst
\|	\|	localghost.dev Defending yourself against cross-site scripting attacks with Content-Security-Policy - localghost A guide to cross-site scripting (XSS) attacks and the HTTP Content-Security-Policy header, what it does, how to use it, and how it protects us.	3.3 parsecs Travel
\|	\|
\|	\|	blog.freeradical.zone S3 URLs have changed; update your Content-Security-Policy - Free Radical Blog I'm serving Free Radical's images etc. from S3. When I updated to Mastodon v2.1.0, I noticed that all the page's images were missing. Safari's Show JavaScript Console menu revealed a lot of errors like: [Error] Refused to load https://s3-us-west-2.amazonaws.com/freeradical-system/accounts/avatars/000/014/309/static/91f9782fad3f6284.png because it does not appear in the img-src directive of the Content Security Policy. Turns out that some time between the releases of v2.0.0 and v2.1.0, the Mastodon switch...	4.7 parsecs Travel
\|	\|
\|	\|	zacbrown.org Zac Brown's Nonsense - Configuring OpenBSD's relayd to serve WASM websites Zac Brown's Nonsense is the source for all of Zac Brown's nonsense. If it's Zac Brown related, then it's probably nonsense. And if it's nonsense, then it's probably here!	3.4 parsecs Travel
\|	\|
\|	\|	wouterj.nl Combatting Login CSRF with Symfony ~ Wouter J Cross-site Request Forgery (CSRF) is one of the traditional vulnerabilities that web applications have to deal with. Every web framework - including Symfony - supports CSRF protection out of the box. A lesser known vulnerability is Login CSRF, a special kind of CSRF attack.	16.9 parsecs Travel
\|