3 articles tagged #Application Security
Storing JWTs in localStorage feels convenient until an XSS vulnerability exposes every token on your site. Here's how to migrate your authentication to HttpOnly cookies — and why it matters more than you think.
XXE vulnerabilities let attackers read local files, trigger SSRF, and even crash your server — all by slipping a malicious entity into an XML document. Here's how to find XXE flaws and close them for good.
ORMs like Django ORM, SQLAlchemy, and Hibernate give you a comfortable safety net — but that net has holes. Here's exactly where raw SQL sneaks back into ORM-heavy projects and how to close those gaps before an attacker finds them.