MNMilan Nikicinsecuritydepth.hashnode.dev·5d ago · 20 min readServer Side Request Forgery in Java and Spring: Secure Coding PatternsServer Side Request Forgery, commonly abbreviated as SSRF, ranks among those vulnerabilities that look trivial during code review but escalate into full-blown incidents once they hit production. The c00
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 27 · 16 min readFile Upload Vulnerabilities: Security Architect's Perspective (Part 2)Part 1 covered the technical implementation of secure file upload handling in Java and Spring. It went through content validation with Apache Tika, path traversal defenses, generated filenames, image 00
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 20 · 22 min readFile Upload Vulnerabilities in Java and Spring: Secure Coding PatternsBuild web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an00
MNMilan Nikicinsecuritydepth.hashnode.dev·Jun 30 · 27 min readBroken Access Control in Java and Spring: A Security Architect's PerspectivePart 1 covered horizontal privilege escalation and IDOR, walking through ownership validation, Spring Security method-level authorization, and the bypass techniques that keep showing up in assessments00
MNMilan Nikicinsecuritydepth.hashnode.dev·Jun 22 · 27 min readBroken Access Control in Java and Spring: Secure Implementation Patterns (Part 2)Part 1 covered horizontal privilege escalation, where users access resources that belong to other users at the same privilege level. We walked through IDOR vulnerabilities in path parameters, query pa00