DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
`next dev` Renders but Nothing Works: Your CSP Is Missing `unsafe-eval`
ai_changewatch profile

`next dev` Renders but Nothing Works: Your CSP Is Missing `unsafe-eval`

#nextjs #security #webdev #react
1
Comments
4 min read
How to Download a Video From a Link: What Happens Behind the Scenes
mr-zhang-bo profile

How to Download a Video From a Link: What Happens Behind the Scenes

#webdev #security #tutorial #seo
Comments
4 min read
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.
rockyyy profile

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting
Comments
3 min read
I Found a P0 Auth Bypass by Testing What null Does to BCrypt
kumar_swamy_0b18518741d91 profile

I Found a P0 Auth Bypass by Testing What null Does to BCrypt

#authentication #java #security #springboot
Comments
1 min read
ToxicPanda 2.0 Chains VPN, Accessibility, and ADB
anoymask profile

ToxicPanda 2.0 Chains VPN, Accessibility, and ADB

#security #threatintel
Comments
11 min read
Rate Limiting vs Throttling: What’s the Difference?
avijitbera profile

Rate Limiting vs Throttling: What’s the Difference?

#api #security #edgewrap #webdev
2
Comments
12 min read
How Invisible CAPTCHAs Work
sospeter profile

How Invisible CAPTCHAs Work

#cybersecurity #security #software #webdev
Comments
3 min read
Zero Permissions on Secrets Manager. Full Access to Your Secrets.
bala_paranj_059d338e44e7e profile

Zero Permissions on Secrets Manager. Full Access to Your Secrets.

#security #aws #cloud #appsec
2
Comments
9 min read
Prompt injection defense: why you can't prompt your way out of it
weston_carnes_d580b505e0c profile

Prompt injection defense: why you can't prompt your way out of it

#ai #security #llm #webdev
Comments
3 min read
Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%
hamelin123 profile

Popular projects SHA-pin GitHub Actions 67.6% of the time — but Docker base images only 7.6%

#docker #security #devsecops #supplychain
Comments
3 min read
Vault Auto-Unseal Without Cloud KMS: The Polling Sidecar Pattern
dwoitzik profile

Vault Auto-Unseal Without Cloud KMS: The Polling Sidecar Pattern

#kubernetes #security #vault #homelab
Comments
5 min read
Publicly Accessible RDS and Unrestricted Security Groups: The Cost Side of Risky Cloud Config
zop_8abedcc7e12 profile

Publicly Accessible RDS and Unrestricted Security Groups: The Cost Side of Risky Cloud Config

#aws #security #finops #devops
1
Comments
4 min read
Trusted AI Agent Transactions, Part 1: The Identity Problem
darkedges profile

Trusted AI Agent Transactions, Part 1: The Identity Problem

#security #oauth #ai #pingidentity
Comments
2 min read
Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange
darkedges profile

Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange

#pingfederate #oauth #security #ai
Comments
5 min read
Trusted AI Agent Transactions, Part 5: End-to-End Proof
darkedges profile

Trusted AI Agent Transactions, Part 5: End-to-End Proof

#go #pingidentity #mcp #security
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.