DEV Community

#websecurity

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Trusting a forwarding header without proving who wrote it is an authorisation decision

Trusting a forwarding header without proving who wrote it is an authorisation decision

1
Comments
4 min read
`Content-Disposition` decides a filename, and the filename is where a download becomes a write

`Content-Disposition` decides a filename, and the filename is where a download becomes a write

Comments
4 min read
A shared cache decides whether an authenticated page is private, and `Vary` is the header that says so

A shared cache decides whether an authenticated page is private, and `Vary` is the header that says so

Comments
4 min read
The Role of Encryption in Protecting Sensitive Information

The Role of Encryption in Protecting Sensitive Information

Comments
4 min read
Security Tip: How to Read a Vulnerability Scan Report (Without Panicking)

Security Tip: How to Read a Vulnerability Scan Report (Without Panicking)

Comments
2 min read
Security Tip: The Ports Attackers Scan First (And How to Lock Them Down)

Security Tip: The Ports Attackers Scan First (And How to Lock Them Down)

Comments
2 min read
One of the Web's Gatekeepers Used the Number 4 as a Private Key — and the Internet Is Scrambling

One of the Web's Gatekeepers Used the Number 4 as a Private Key — and the Internet Is Scrambling

Comments
4 min read
How to Deploy SafeLine WAF with Traefik Safely: A Routing Checklist

How to Deploy SafeLine WAF with Traefik Safely: A Routing Checklist

Comments
4 min read
8.16 Million WordPress Sites and 5.16 Million in the US: Reading a CMS Baseline

8.16 Million WordPress Sites and 5.16 Million in the US: Reading a CMS Baseline

1
Comments
3 min read
How to Install SafeLine WAF on Debian: A Preflight-to-Cutover Checklist

How to Install SafeLine WAF on Debian: A Preflight-to-Cutover Checklist

Comments
4 min read
How to Plan a SafeLine WAF Installation on CentOS with Readiness Checks

How to Plan a SafeLine WAF Installation on CentOS with Readiness Checks

Comments
4 min read
How to Plan a SafeLine WAF Installation on CentOS

How to Plan a SafeLine WAF Installation on CentOS

Comments
3 min read
Your Domain Is Public. But Do You Know What It Reveals? A Practical Security Assessment Guide

Your Domain Is Public. But Do You Know What It Reveals? A Practical Security Assessment Guide

1
Comments
8 min read
What Is Cross-Site Scripting (XSS) and Why Is It Dangerous?

What Is Cross-Site Scripting (XSS) and Why Is It Dangerous?

Comments
5 min read
Understanding SQL Injection Attacks and How to Prevent Them

Understanding SQL Injection Attacks and How to Prevent Them

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.