Posts

All the articles I've posted.

• CSP & Same-Origin Policy Bypass

  10 Apr, 2025

  Content Security Policy (CSP) and Same-Origin Policy (SOP) are critical web security mechanisms designed to prevent various attacks including Cross-Site Scri...

• Insecure Direct Object References (IDOR)

  10 Apr, 2025

  Insecure Direct Object References (IDOR) is a critical web security vulnerability that occurs when an application exposes a reference to an internal implemen...

• Cross-Site Request Forgery (CSRF)

  10 Apr, 2025

  Cross-Site Request Forgery (CSRF) is a web security vulnerability that allows an attacker to induce users to perform actions they did not intend to perform. ...

• JSON Web Token (JWT) Security

  10 Apr, 2025

  JSON Web Tokens (JWTs) are an open standard (RFC 7519) for securely transmitting information between parties as a compact, self-contained JSON object. JWTs a...