DEV Community

API

Application Programming Interface

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service
rxkov profile
Rxkov

gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service

#api #backend #cybersecurity #security
Comments
5 min read
LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope
rxkov profile
Rxkov

LDAP Injection in API Login Endpoints: Filter Corruption, CVEs, and the Active Directory Scope

#api #authentication #cybersecurity #security
Comments
5 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
rxkov profile
Rxkov

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Content-Type Confusion in REST APIs: One Header Switch, Three Attack Surfaces
rxkov profile
Rxkov

Content-Type Confusion in REST APIs: One Header Switch, Three Attack Surfaces

#api #cybersecurity #java #security
Comments
5 min read
Mass Assignment in REST APIs: When the Framework Binds More Than It Should
rxkov profile
Rxkov

Mass Assignment in REST APIs: When the Framework Binds More Than It Should

#api #backend #security
Comments
5 min read
S3 Pre-Signed URLs Are Bearer Tokens: Five Attack Surfaces API Developers Miss
rxkov profile
Rxkov

S3 Pre-Signed URLs Are Bearer Tokens: Five Attack Surfaces API Developers Miss

#api #aws #cybersecurity #security
Comments
5 min read
JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent
rxkov profile
Rxkov

JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

#api #authentication #cybersecurity #security
Comments
5 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
rxkov profile
Rxkov

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
Nine things I measured about the HubSpot API that the docs don't tell you
meticulosity profile

Nine things I measured about the HubSpot API that the docs don't tell you

#hubspot #api #python #opensource
1
Comments
6 min read
Stop Faking Your Test Data: Why `Faker.js` Breaks the Moment You Have Foreign Keys
jitendra_devabhaktuni_0f1 profile

Stop Faking Your Test Data: Why `Faker.js` Breaks the Moment You Have Foreign Keys

#api #ai #datascience #dataengineering
Comments
5 min read
Prompt Caching Is a Timing Oracle: How the 41-80% Cost Win Becomes Cross-Tenant System Prompt Extraction
rxkov profile
Rxkov

Prompt Caching Is a Timing Oracle: How the 41-80% Cost Win Becomes Cross-Tenant System Prompt Extraction

#api #cybersecurity #llm #security
Comments
4 min read
Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle
rxkov profile
Rxkov

Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle

#api #backend #cybersecurity #security
Comments
5 min read
One API Key Across OpenAI, Claude and Gemini: Chatbot Fallback Options for SaaS Apps
colemitchell4991 profile

One API Key Across OpenAI, Claude and Gemini: Chatbot Fallback Options for SaaS Apps

#chatbot #llm #api #saas
Comments
7 min read
The most dangerous API response is HTTP 200 with an empty body
mohammed_arshadansari_f2 profile

The most dangerous API response is HTTP 200 with an empty body

#api #backend #monitoring
Comments
4 min read
3 API changes to audit before your next deploy: Supabase, HubSpot, and Shopify
breakwaterdev profile

3 API changes to audit before your next deploy: Supabase, HubSpot, and Shopify

#api #devops #webdev #testing
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.