Diseño y desarrollo web
How to Get Cross-Site Scripting Right
A class of vulnerability, known as XSS, where an attacker gets malicious script to run in other users' browsers through content a site displays without pro...
Lumexa Media · Artículos
La revista
Notas de trabajo de un estudio que edita imágenes, monta vídeo, mezcla audio, crea sitios web, renderiza 3D y discute sobre resultados de búsqueda. Cada artículo lo escribe una persona identificada con su nombre y cita al organismo que publicó las cifras que contiene.
5.872 artículos en 14 disciplinas
Diseño y desarrollo web
How to Get Cross-Site Request Forgery Right
An attack, known as CSRF, where a malicious site causes a logged-in user's browser to send an unwanted request to another site, such as changing an email a...
Diseño y desarrollo web
SQL Injection: The Decisions That Matter
A vulnerability where user input is inserted into a database query in a way that lets an attacker change the query, reading or modifying data they should not ac...
Diseño y desarrollo web
How to Get OWASP Top 10 Right
The Open Worldwide Application Security Project's list of the most critical web application security risks, updated periodically from industry data. Key ta...
Diseño y desarrollo web
Password Storage: The Decisions That Matter
How applications store user passwords so that a database breach does not reveal them, using slow, salted password hashing algorithms. Key takeaways OWASP recomm...
Diseño y desarrollo web
A Practical Guide to Rate Limiting and Brute Force Protection
Limiting how many requests a client can make in a given time, especially to login, password reset and API endpoints, to slow down automated attacks. Key takeawa...
Diseño y desarrollo web
How to Get Dependency and Supply Chain Security Right
Managing the security of third-party packages a website depends on, from npm and Composer libraries to plugins and themes. Key takeaways Audit tools: npm audit...
Diseño y desarrollo web
Secrets and Environment Variables, Done Properly
Keeping API keys, database passwords and other credentials out of source code, using environment variables or a secrets manager instead. Key takeaways Common pr...
Diseño y desarrollo web
Planned Maintenance and 503 Status: What Actually Works
How to take a site offline temporarily for maintenance without harming search visibility, using a 503 Service Unavailable status and a clear message for visitor...
Diseño y desarrollo web
Baseline Browser Support, Done Properly
Baseline is a shared label for web platform features that work across all the major browsers, used to decide which features are safe to use without fallbacks. K...
Diseño y desarrollo web
Node.js Release Lines and LTS: What Actually Works
The Node.js release schedule, in which even-numbered major versions become long-term support releases and odd-numbered versions are short-lived. Key takeaways L...
Diseño y desarrollo web
A Practical Guide to PHP Version Support
The support lifecycle of PHP releases, which receive active bug fixes and then security-only fixes before reaching end of life. Key takeaways Active support: tw...
Load more articles
Showing 5,544 of 5,872
Pruébenos gratis con su propio trabajo.
Envíenos algo real y lo haremos según su brief, sin tarjeta y sin compromiso. Si el nivel no es el que necesita, no habrá perdido nada.