DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The One Header on All 56 Pages That Belongs to a Plugin Runtime: x-permitted-cross-domain-policies

The One Header on All 56 Pages That Belongs to a Plugin Runtime: x-permitted-cross-domain-policies

Comments
3 min read
Adobe Connect APSB26-191: Six CVSS 10.0s, Five Branches, One Suffix That Breaks Your Scanner

Adobe Connect APSB26-191: Six CVSS 10.0s, Five Branches, One Suffix That Breaks Your Scanner

Comments
2 min read
Base64 Is Not Encryption: How to Decode API Data and Avoid Common Mistakes

Base64 Is Not Encryption: How to Decode API Data and Avoid Common Mistakes

Comments
7 min read
Wazuh rule with <hostname> matches in wazuh-logtest but never fires for agent events

Wazuh rule with <hostname> matches in wazuh-logtest but never fires for agent events

Comments 1
3 min read
How to Audit HTTP Security Headers for Any URL with One GET Request

How to Audit HTTP Security Headers for Any URL with One GET Request

Comments
5 min read
Seven Neurons Is All It Takes to Backdoor Your AI Agent

Seven Neurons Is All It Takes to Backdoor Your AI Agent

Comments
5 min read
How to Find All Subdomains of Any Website (Free, No Install)

How to Find All Subdomains of Any Website (Free, No Install)

1
Comments
2 min read
A search box that JOINed to your token table: ORM filter injection in KoboToolbox (GHSA-xrq7-925g-qg5m)

A search box that JOINed to your token table: ORM filter injection in KoboToolbox (GHSA-xrq7-925g-qg5m)

Comments
8 min read
SSH Certificate Authentication with ssh-keygen (2026)

SSH Certificate Authentication with ssh-keygen (2026)

Comments
11 min read
The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool

The Allowlist Guarded the Destination, Not the Route: A Proxies Parameter Leaked Credentials From an Agent HTTP Tool

Comments
12 min read
Stop Copying authorized_keys to Every Host: Practical OpenSSH Certificates on Linux

Stop Copying authorized_keys to Every Host: Practical OpenSSH Certificates on Linux

Comments
10 min read
The Browser Side of Cross-Origin Isolation on app.onepassapps.com: No SharedArrayBuffer, and a Clock That Steps in 0.1 ms

The Browser Side of Cross-Origin Isolation on app.onepassapps.com: No SharedArrayBuffer, and a Clock That Steps in 0.1 ms

Comments
4 min read
Protecting an Electron app's JavaScript: what actually works

Protecting an Electron app's JavaScript: what actually works

Comments
5 min read
Image File Signatures: PNG, JPEG, WebP, AVIF and More

Image File Signatures: PNG, JPEG, WebP, AVIF and More

1
Comments 1
5 min read
OAuth Redirect URIs Need a Test Trust Boundary

OAuth Redirect URIs Need a Test Trust Boundary

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.