Conception et développement web
How to Get Cross-Site Scripting Right
A class of vulnerability, known as XSS, where an attacker gets malicious script to run in other users' browsers through content a site displays without pro...
Lumexa Media · Articles
Le journal
Les notes de travail d'un studio qui retouche des images, monte des vidéos, mixe de l'audio, crée des sites web, réalise des rendus 3D et débat des résultats de recherche. Chaque article est signé par une personne nommée et cite l'organisme qui a publié les chiffres qu'il contient.
5 872 articles dans 14 disciplines
Conception et développement web
How to Get Cross-Site Request Forgery Right
An attack, known as CSRF, where a malicious site causes a logged-in user's browser to send an unwanted request to another site, such as changing an email a...
Conception et développement web
SQL Injection: The Decisions That Matter
A vulnerability where user input is inserted into a database query in a way that lets an attacker change the query, reading or modifying data they should not ac...
Conception et développement web
How to Get OWASP Top 10 Right
The Open Worldwide Application Security Project's list of the most critical web application security risks, updated periodically from industry data. Key ta...
Conception et développement web
Password Storage: The Decisions That Matter
How applications store user passwords so that a database breach does not reveal them, using slow, salted password hashing algorithms. Key takeaways OWASP recomm...
Conception et développement web
A Practical Guide to Rate Limiting and Brute Force Protection
Limiting how many requests a client can make in a given time, especially to login, password reset and API endpoints, to slow down automated attacks. Key takeawa...
Conception et développement web
How to Get Dependency and Supply Chain Security Right
Managing the security of third-party packages a website depends on, from npm and Composer libraries to plugins and themes. Key takeaways Audit tools: npm audit...
Conception et développement web
Secrets and Environment Variables, Done Properly
Keeping API keys, database passwords and other credentials out of source code, using environment variables or a secrets manager instead. Key takeaways Common pr...
Conception et développement web
Planned Maintenance and 503 Status: What Actually Works
How to take a site offline temporarily for maintenance without harming search visibility, using a 503 Service Unavailable status and a clear message for visitor...
Conception et développement web
Baseline Browser Support, Done Properly
Baseline is a shared label for web platform features that work across all the major browsers, used to decide which features are safe to use without fallbacks. K...
Conception et développement web
Node.js Release Lines and LTS: What Actually Works
The Node.js release schedule, in which even-numbered major versions become long-term support releases and odd-numbered versions are short-lived. Key takeaways L...
Conception et développement web
A Practical Guide to PHP Version Support
The support lifecycle of PHP releases, which receive active bug fixes and then security-only fixes before reaching end of life. Key takeaways Active support: tw...
Load more articles
Showing 5,544 of 5,872
Essayez-nous gratuitement sur vos propres projets.
Envoyez-nous un vrai projet et nous le réaliserons selon votre brief — sans carte bancaire, sans engagement. Si le niveau ne vous convient pas, vous n'aurez rien perdu.