DEV Community

#backend

Desenvolvimento do lado do servidor, APIs, bancos de dados e logica de negocios.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
DDoS Protection & Rate Limiting Abuse Cases

DDoS Protection & Rate Limiting Abuse Cases

Comments 2
2 min read
ReDoS via API Input Validation: How a Single Request Stalls the Event Loop

ReDoS via API Input Validation: How a Single Request Stalls the Event Loop

Comments 1
5 min read
Postgres Advisory Locks for Distributed Cron: Killing Duplicate Job Runs Without a Redis Dependency

Postgres Advisory Locks for Distributed Cron: Killing Duplicate Job Runs Without a Redis Dependency

Comments
5 min read
Build One Guarded Prisma Endpoint, Then Break It Five Ways

Build One Guarded Prisma Endpoint, Then Break It Five Ways

Comments
8 min read
What Is a Backend Server Actually Doing?

What Is a Backend Server Actually Doing?

5
Comments
11 min read
Async/Await ve Event Loop: Binlerce Kullanıcı Aynı Anda Nasıl Bağlanıyor?

Async/Await ve Event Loop: Binlerce Kullanıcı Aynı Anda Nasıl Bağlanıyor?

Comments
2 min read
Building a Secure Employee Management System Using Ballerina, PostgreSQL, Docker, and React

Building a Secure Employee Management System Using Ballerina, PostgreSQL, Docker, and React

Comments
4 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

Comments
5 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

Comments
5 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Comments
4 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

Comments
6 min read
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

Comments
4 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

Comments
5 min read
Webhook Signature Bypass: When the Receiver Skips the HMAC Check

Webhook Signature Bypass: When the Receiver Skips the HMAC Check

Comments
5 min read
Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug

Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.