DEV Community

#backend

Desenvolvimento do lado do servidor, APIs, bancos de dados e logica de negocios.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting
roxdavirox profile
Davi

Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting

#api #backend #cybersecurity #security
Comments
6 min read
Framework Binding Gap: How the ORM Accepts Fields You Never Documented
roxdavirox profile
Davi

Framework Binding Gap: How the ORM Accepts Fields You Never Documented

#backend #cybersecurity #database #security
Comments
6 min read
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access
roxdavirox profile
Davi

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

#backend #cybersecurity #devops #security
Comments
4 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
roxdavirox profile
Davi

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control
roxdavirox profile
Davi

HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

#api #backend #cybersecurity #security
Comments
5 min read
Starter dependencies — how they work
ankit_verma_e2fa7fb2aa95d profile

Starter dependencies — how they work

#spring #java #backend #programming
Comments
6 min read
CRLF Injection in API Responses: When User Input Reaches HTTP Headers
roxdavirox profile
Davi

CRLF Injection in API Responses: When User Input Reaches HTTP Headers

#api #backend #cybersecurity #security
Comments
5 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint
roxdavirox profile
Davi

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

#api #backend #cybersecurity #security
Comments
5 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
roxdavirox profile
Davi

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Mass Assignment in REST APIs: When the Framework Binds More Than It Should
roxdavirox profile
Davi

Mass Assignment in REST APIs: When the Framework Binds More Than It Should

#api #backend #security
Comments
5 min read
SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE
roxdavirox profile
Davi

SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE

#api #backend #cybersecurity #security
Comments
5 min read
ReDoS via API Input Validation: How a Single Request Stalls the Event Loop
roxdavirox profile
Davi

ReDoS via API Input Validation: How a Single Request Stalls the Event Loop

#backend #javascript #node #security
Comments
5 min read
Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle
roxdavirox profile
Davi

Non-Constant-Time Comparison Turns Every API Token into a Character-by-Character Oracle

#api #backend #cybersecurity #security
Comments
5 min read
Working: Rate Limiters Key on Raw Paths — Routers Normalize After
roxdavirox profile
Davi

Working: Rate Limiters Key on Raw Paths — Routers Normalize After

#backend #cybersecurity #security
Comments
4 min read
Designing reliable appointment confirmations with Google Calendar and WhatsApp
luis-montoya profile

Designing reliable appointment confirmations with Google Calendar and WhatsApp

#architecture #backend #systemdesign
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.