Webdesign & Webentwicklung
How to Get Cross-Site Scripting Right
A class of vulnerability, known as XSS, where an attacker gets malicious script to run in other users' browsers through content a site displays without pro...
Lumexa Media · Artikel
Das Journal
Arbeitsnotizen aus einem Studio, das Bilder bearbeitet, Videos schneidet, Audio mischt, Websites baut, 3D rendert und über Suchergebnisse diskutiert. Jeder Artikel stammt von einer namentlich genannten Person und gibt an, welche Stelle die darin zitierten Zahlen veröffentlicht hat.
5.872 Artikel aus 14 Fachbereichen
Webdesign & Webentwicklung
How to Get Cross-Site Request Forgery Right
An attack, known as CSRF, where a malicious site causes a logged-in user's browser to send an unwanted request to another site, such as changing an email a...
Webdesign & Webentwicklung
SQL Injection: The Decisions That Matter
A vulnerability where user input is inserted into a database query in a way that lets an attacker change the query, reading or modifying data they should not ac...
Webdesign & Webentwicklung
How to Get OWASP Top 10 Right
The Open Worldwide Application Security Project's list of the most critical web application security risks, updated periodically from industry data. Key ta...
Webdesign & Webentwicklung
Password Storage: The Decisions That Matter
How applications store user passwords so that a database breach does not reveal them, using slow, salted password hashing algorithms. Key takeaways OWASP recomm...
Webdesign & Webentwicklung
A Practical Guide to Rate Limiting and Brute Force Protection
Limiting how many requests a client can make in a given time, especially to login, password reset and API endpoints, to slow down automated attacks. Key takeawa...
Webdesign & Webentwicklung
How to Get Dependency and Supply Chain Security Right
Managing the security of third-party packages a website depends on, from npm and Composer libraries to plugins and themes. Key takeaways Audit tools: npm audit...
Webdesign & Webentwicklung
Secrets and Environment Variables, Done Properly
Keeping API keys, database passwords and other credentials out of source code, using environment variables or a secrets manager instead. Key takeaways Common pr...
Webdesign & Webentwicklung
Planned Maintenance and 503 Status: What Actually Works
How to take a site offline temporarily for maintenance without harming search visibility, using a 503 Service Unavailable status and a clear message for visitor...
Webdesign & Webentwicklung
Baseline Browser Support, Done Properly
Baseline is a shared label for web platform features that work across all the major browsers, used to decide which features are safe to use without fallbacks. K...
Webdesign & Webentwicklung
Node.js Release Lines and LTS: What Actually Works
The Node.js release schedule, in which even-numbered major versions become long-term support releases and odd-numbered versions are short-lived. Key takeaways L...
Webdesign & Webentwicklung
A Practical Guide to PHP Version Support
The support lifecycle of PHP releases, which receive active bug fixes and then security-only fixes before reaching end of life. Key takeaways Active support: tw...
Load more articles
Showing 5,544 of 5,872
Testen Sie uns kostenlos mit Ihrem eigenen Material.
Schicken Sie uns einen echten Auftrag, und wir erledigen ihn nach Ihren Vorgaben – ohne Kreditkarte, ohne Verpflichtung. Wenn die Qualität nicht Ihren Anforderungen entspricht, haben Sie nichts verloren.