DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your Agent's Guardrails Can't See the Money

Your Agent's Guardrails Can't See the Money

11
Comments 3
4 min read
Does Prisma respect Supabase RLS? No — here's why

Does Prisma respect Supabase RLS? No — here's why

Comments 1
6 min read
Reject Image Polyglots After EXIF Removal, Before They Reach Your CDN

Reject Image Polyglots After EXIF Removal, Before They Reach Your CDN

Comments
2 min read
Browser-use's Real Risk Surface Is the Browser Session

Browser-use's Real Risk Surface Is the Browser Session

Comments
2 min read
Dev Log 04: Engineering Automated Community Security Shields on the Edge

Dev Log 04: Engineering Automated Community Security Shields on the Edge

Comments
1 min read
The BFF Pattern: Your API Token Has No Business in the Browser

The BFF Pattern: Your API Token Has No Business in the Browser

Comments
5 min read
When Your Resilience Vendor Is Your Single Point of Failure: A Multi-CDN Failover Threat Model After the November 2025 Cloudflare Outage

When Your Resilience Vendor Is Your Single Point of Failure: A Multi-CDN Failover Threat Model After the November 2025 Cloudflare Outage

1
Comments 1
7 min read
Wiring SlopScan into Claude Code — A Skill, a Hook, and a Bug I Almost Shipped

Wiring SlopScan into Claude Code — A Skill, a Hook, and a Bug I Almost Shipped

1
Comments
8 min read
The Secure Way to Connect HTML Forms to a MySQL Database Using PHP PDO

The Secure Way to Connect HTML Forms to a MySQL Database Using PHP PDO

Comments
4 min read
I tested whether agents leak secrets without being asked — and whether my scanner catches it when they do

I tested whether agents leak secrets without being asked — and whether my scanner catches it when they do

Comments 8
8 min read
Building a passive OSINT workspace without overstating risk

Building a passive OSINT workspace without overstating risk

Comments
2 min read
I built a tamper-evident record log in Go using nothing but SHA-256 and a hash chain

I built a tamper-evident record log in Go using nothing but SHA-256 and a hash chain

Comments
3 min read
Your AI wrote the HTML. Now decide what that page is allowed to talk to.

Your AI wrote the HTML. Now decide what that page is allowed to talk to.

Comments
5 min read
JarService / zhima Malware Entering via Insecure Android Car Head Unit Update Paths

JarService / zhima Malware Entering via Insecure Android Car Head Unit Update Paths

1
Comments
9 min read
5 Discord security mistakes every server admin makes

5 Discord security mistakes every server admin makes

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.