How to ask for payment when finding security issues in a big website

Stijn de Ligt — Sun, 05 Jun 2022 12:29:38 +0000

Recently I discovered two medium size security hacks in an international platform that ironically enough specializes in security by means of phishing prevention.

These issues allowed me to have insight in their internal db and graphql structure and insert data that should not be there. With these hacks I could theoretically make the platform useless for some of their paying clients, but obviously I am not going to do that.

I'd like to point these out to them, but am not intending to go unpaid. How would you contact the people behind this platform with my intentions? It's important not to come off as threatening (I really mean no harm), and not to reveal the source of the issues right away.

As you might guess I have no knowledge about anything like this. If you think this is a bad idea to begin with feel free to share your thoughts as well!

Improve your iframe UX with React LoadingIframes

Stijn de Ligt — Sun, 29 May 2022 19:55:14 +0000

Iframes can take a long time to load depending on the source. While your user is waiting it's preferable to give feedback on what is happening with their page, and why they are staring at a blank screen.

Using react-loading-iframe you can show a skeleton that is displayed until the content of the iframe is ready.

Install using npm i react-loading-iframe

Then include on your react components the following way:

import LoadingIframe from 'react-loading-iframe';

const Skeleton = () => {
  return <div>Cool loading screen</div>;
};

export const BasicExample = () => {
  return (
    <LoadingIframe
      skeleton={<Skeleton />}
      src="https://google.com"
      className="your-class"
      frameBorder={0}
    />
  );
};

Any suggestions on this are welcome as this is my first open source repository! Please give it a try.

DEV Community: Stijn de Ligt

How to ask for payment when finding security issues in a big website

Improve your iframe UX with React LoadingIframes