DEV Community

#backend

Desenvolvimento do lado do servidor, APIs, bancos de dados e logica de negocios.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Mass Assignment in REST APIs: When the Framework Binds More Than It Should
roxdavirox profile
Davi

Mass Assignment in REST APIs: When the Framework Binds More Than It Should

#api #backend #security
Comments
5 min read
HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control
roxdavirox profile
Davi

HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

#api #backend #cybersecurity #security
Comments
5 min read
Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug
roxdavirox profile
Davi

Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug

#backend #javascript #node #security
Comments
5 min read
API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/
roxdavirox profile
Davi

API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/

#api #backend #cybersecurity #security
Comments
5 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint
roxdavirox profile
Davi

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

#api #backend #cybersecurity #security
Comments
5 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model
roxdavirox profile
Davi

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

#api #authentication #backend #security
Comments
4 min read
Webhook Signature Bypass: When the Receiver Skips the HMAC Check
roxdavirox profile
Davi

Webhook Signature Bypass: When the Receiver Skips the HMAC Check

#api #backend #cybersecurity #security
Comments
5 min read
gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service
roxdavirox profile
Davi

gRPC Server Reflection: The Unauthenticated API Catalog in Your Production Service

#api #backend #cybersecurity #security
Comments
5 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
roxdavirox profile
Davi

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention
roxdavirox profile
Davi

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

#backend #cybersecurity #infosec #security
Comments
5 min read
CRLF Injection in API Responses: When User Input Reaches HTTP Headers
roxdavirox profile
Davi

CRLF Injection in API Responses: When User Input Reaches HTTP Headers

#api #backend #cybersecurity #security
Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately
roxdavirox profile
Davi

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

#api #backend #cybersecurity #security
Comments
6 min read
Framework Binding Gap: How the ORM Accepts Fields You Never Documented
roxdavirox profile
Davi

Framework Binding Gap: How the ORM Accepts Fields You Never Documented

#backend #cybersecurity #database #security
Comments
6 min read
Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting
roxdavirox profile
Davi

Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting

#api #backend #cybersecurity #security
Comments
6 min read
Starter dependencies — how they work
ankit_verma_e2fa7fb2aa95d profile

Starter dependencies — how they work

#spring #java #backend #programming
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.