Web Security RSS Feeds

Directory0 web security feeds · 43 articlesEnglish only →

Latest

Web Security articles

Authentication token storage in modern web apps: A security-focused analysis of localStorage, cookies, and in-memory approaches

Where should your auth token live so an XSS bug can't steal it? Here's how to build auth that survives the crazy non-secure world we live in.

Insighttechnologyprogrammingweb security

neciudan.dev·Hacker News: Front Page·8d ago·29 min read

A Comprehensive Guide to HTTP Strict Transport Security (HSTS): Implementation, Preloading, and Best Practices

technologyprogramming

Shared by @undercode.bsky.social ↗

undercodetesting.com14d ago

Why many web developers struggle to understand CORS and why it matters

Opiniontechnologyprogramming

fosterelli.co26d ago

Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation

technologycybersecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com1mo ago

Detectify: Automated Web Security Scanner for Vulnerability Detection

Detectify is a web security scanner that performs fully automated tests to identify security issues on your website. It tests your website for over 1000 vulnerabilities, including OWASP Top 10, and can be used on both staging and production environments.

technologycybersecuritybusiness

opsmtrs.com·Tech by Flipboard·1mo ago·3 min read

Understanding WebAuthn credential protection policy and discoverable credentials

Pilcrow's personal website.

Insighttechnologyprogrammingweb securitypilcrowonpaper.com·Hacker News: Front Page·1mo ago·3 min read

User Frustration with Cloudflare's Security Interstitials and Brand Perception

The only time they see it is when it impedes their access to a site.

Opiniontechnologybusinessuser experience

news.ycombinator.com·Hacker News: Front Page·2mo ago·4 min read

Let's Encrypt's Challenge: Creating Intentionally Broken Certificates for Testing

Insighttechnologyprogramming

letsencrypt.org3mo ago

Website Uses Anubis Proof-of-Work System to Protect Against AI Scraping

Newstechnologyprogramming

wesnoth.org3mo ago

Server Security Block: HTTP 400 Error Message

400

Newstechnologyweb security

phys.org3mo ago

Firefox 148 Introduces Standardized Sanitizer API for Enhanced XSS Protection

Newstechnologyprogramming

hacks.mozilla.org4mo ago

Site Blocks Outdated Browsers to Combat LLM Training Crawlers

You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace, the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most

Newstechnologyweb security

utcc.utoronto.ca5mo ago

Simplified CSRF Protection Without Tokens or Hidden Form Fields for Web Frameworks

technologyprogramming

blog.miguelgrinberg.com6mo ago

Technical Guide: Protecting Forgejo Instances from AI Web Crawlers with Nginx Configuration

This article describes my nginx configuration and strategy on how to prevent web crawlers from putting down my instance while still serving most people with minimal amount of friction.

technologyprogramming

her.esy.fun6mo ago

Authentication token storage in modern web apps: A security-focused analysis of localStorage, cookies, and in-memory approaches

A Comprehensive Guide to HTTP Strict Transport Security (HSTS): Implementation, Preloading, and Best Practices

Why many web developers struggle to understand CORS and why it matters

Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation

Detectify: Automated Web Security Scanner for Vulnerability Detection

Understanding WebAuthn credential protection policy and discoverable credentials

User Frustration with Cloudflare's Security Interstitials and Brand Perception

Let's Encrypt's Challenge: Creating Intentionally Broken Certificates for Testing

Website Uses Anubis Proof-of-Work System to Protect Against AI Scraping

Server Security Block: HTTP 400 Error Message

Firefox 148 Introduces Standardized Sanitizer API for Enhanced XSS Protection

Site Blocks Outdated Browsers to Combat LLM Training Crawlers

Website Implements Anubis Proof-of-Work System to Protect Against AI Scraping

Website Blocks Old Browsers to Combat LLM Training Crawlers

Website Implements Anubis Proof-of-Work System to Block AI Scraping

Website Implements Anubis Proof-of-Work System to Block AI Scraping

Simplified CSRF Protection Without Tokens or Hidden Form Fields for Web Frameworks

Technical Guide: Protecting Forgejo Instances from AI Web Crawlers with Nginx Configuration