Tag: xss
-
Why Security Engineering needs a Hacker Mentality
Security engineering is about a lot of things, but the best security engineers show the 'hacker mindset' characteristics of curiosity and imagination. Here's an example of how I found an XSS vulnerability in a forum, mostly by accident, and how curiosity was the key.
-
Third-party libraries and security issues
A month or so ago Chris Ferdinandi recommended that developers avoid third-party libraries for security reasons. Dan partially-agrees, but feels the need to explain where and why he disagrees too.
-
Anatomy of Cookie XSS
Using a real-life vulnerability he discovered on the University of Oxford's IT Services website as an example, Dan reminds you of the importance of sanitising even cookie data to prevent XSS vulnerabilities.