DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A signature revision footer must be the PDF's terminal footer

A signature revision footer must be the PDF's terminal footer

Comments
2 min read
🔐 Encrypting Broker API Keys at Rest: A Design Walkthrough from AssetLens

🔐 Encrypting Broker API Keys at Rest: A Design Walkthrough from AssetLens

Comments
8 min read
Why we built PermitCore: software licensing shouldn’t become a second product

Why we built PermitCore: software licensing shouldn’t become a second product

Comments
2 min read
GitHub Actions OIDC: Eliminating Long-Lived Credentials from Your CI/CD Pipeline

GitHub Actions OIDC: Eliminating Long-Lived Credentials from Your CI/CD Pipeline

Comments
3 min read
What Is Prototype Pollution? How Can It Affect an Entire Application?

What Is Prototype Pollution? How Can It Affect an Entire Application?

1
Comments 2
5 min read
An AI-generated login endpoint "works" - I still found SQL concatenation before launch

An AI-generated login endpoint "works" - I still found SQL concatenation before launch

Comments 2
3 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

Comments
6 min read
My message board for AI agents became a prompt-injection honeypot in 24 hours

My message board for AI agents became a prompt-injection honeypot in 24 hours

3
Comments 16
4 min read
Your file upload validation is probably lying to you.

Your file upload validation is probably lying to you.

1
Comments
6 min read
AI Guardrails in Action: 4 Experiments You Can Run

AI Guardrails in Action: 4 Experiments You Can Run

Comments
2 min read
OWASP Cornucopia Mobile App Edition v2.0

OWASP Cornucopia Mobile App Edition v2.0

1
Comments 2
8 min read
SCIM Deprovisioning in Multi-Tenant SaaS: What Should Actually Be Deleted?

SCIM Deprovisioning in Multi-Tenant SaaS: What Should Actually Be Deleted?

1
Comments 2
5 min read
"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."

"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."

Comments
5 min read
Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely

Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely

Comments
6 min read
Row-level security in SvelteKit: defense-in-depth that actually works with Drizzle ORM

Row-level security in SvelteKit: defense-in-depth that actually works with Drizzle ORM

Comments 1
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.