DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
An AI-generated login endpoint "works" - I still found SQL concatenation before launch
yuan_ming_3549dae7e400994 profile

An AI-generated login endpoint "works" - I still found SQL concatenation before launch

#ai #python #security #sql
Comments 2
3 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
My message board for AI agents became a prompt-injection honeypot in 24 hours
jo-do profile
Jo Do

My message board for AI agents became a prompt-injection honeypot in 24 hours

#showdev #ai #security #promptinjection
3
Comments 16
4 min read
AI Guardrails in Action: 4 Experiments You Can Run
sriharsha_cr profile
Harsha

AI Guardrails in Action: 4 Experiments You Can Run

#ai #security #llm #python
Comments
2 min read
OWASP Cornucopia Mobile App Edition v2.0
sydseter profile

OWASP Cornucopia Mobile App Edition v2.0

#cybersecurity #mobile #security #software
1
Comments 2
8 min read
Your file upload validation is probably lying to you.
ekansh_tiwari profile

Your file upload validation is probably lying to you.

#security #webdev #javascript #fileupload
1
Comments
6 min read
SCIM Deprovisioning in Multi-Tenant SaaS: What Should Actually Be Deleted?
ciam_michay profile

SCIM Deprovisioning in Multi-Tenant SaaS: What Should Actually Be Deleted?

#saas #security #authentication #identity
1
Comments 2
5 min read
"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."
enjoy_kumawat profile

"My Docs Named the File That Stops AI Attribution in Commits. That File Isn't There."

#claudecode #ai #security #debugging
Comments
5 min read
Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely
codejs_6920 profile

Don't Trust-Execute AI-Generated Code: A Sandbox Harness for Evaluating Coding Models Safely

#ai #security #docker #programming
Comments
6 min read
Row-level security in SvelteKit: defense-in-depth that actually works with Drizzle ORM
verdantstack profile

Row-level security in SvelteKit: defense-in-depth that actually works with Drizzle ORM

#sveltekit #postgres #security #drizzle
Comments 1
3 min read
Sandbox First: A Safer Local Harness for Evaluating Free Coding Models on Your Own Codebase
devgo_5325 profile

Sandbox First: A Safer Local Harness for Evaluating Free Coding Models on Your Own Codebase

#ai #programming #security #testing
Comments
6 min read
Quarantine Lanes for AI-Generated Patches: A Bash Gate You Can Run for Free
hackgo_6978 profile

Quarantine Lanes for AI-Generated Patches: A Bash Gate You Can Run for Free

#ai #security #automation #bash
Comments
6 min read
Canary Tests for AI Coding Agents: A Sandbox Harness You Can Run Yourself
applab_743 profile

Canary Tests for AI Coding Agents: A Sandbox Harness You Can Run Yourself

#ai #agents #security #testing
Comments
4 min read
Instant Payments Risk Management: What Every Fintech Developer Should Know
anand_972001e55572923b817 profile
Anand

Instant Payments Risk Management: What Every Fintech Developer Should Know

#backend #fintech #security
Comments
4 min read
Looking for 100 technical testers: SecondGate (WordPress security & passkeys, no cloud dependency)
secondgatewp profile

Looking for 100 technical testers: SecondGate (WordPress security & passkeys, no cloud dependency)

#webdev #security #wordpress #php
1
Comments 3
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.