Winning wmn; 2023Ah! This one has been pending on me for a long time. But as the cozy winters and holiday season are here I felt to wrap up things I wanted to finish this year. After all this year I was trying to push my boundaries and put myself in challenging situa...Dec 19, 2023 · 3 min readsurabhisuman.in
CORS and Effect: HTTP Headers, Cross-Origin StyleCORS refers to Cross-Origin Resource Sharing. It’s a terminology used in the context of browser requests. Now before we get deeper into CORS, we first need to understand origin and why the need for CORS Origin and same origin policy Origin is the sou...Dec 18, 2023 · 5 min readsurabhisuman.in
XSS Demystified: Understanding and Preventing Cross-Site ScriptingIt allows an attacker to execute a malicious arbitrary Javascript code within the web browser of victim user. This gives the attacker’s script privileged access to make requests to the server (such as same-origin cookies and storage permissions) and ...Dec 18, 2023 · 2 min readsurabhisuman.in
Deciphering CSRFCSRF refers to cross-site request forgery. It is an exploit on websites where an attacker is forging the identity of a trusted user to perform an action that the user didn’t intend to. Who is a trusted user? A trusted user for a website can be an aut...Dec 18, 2023 · 3 min readsurabhisuman.in
Logging in Microservices: A developer's journeyAs software engineers, logs are our best friend for finding anything right/wrong with our services. Be it exception tracing, RCA for a bug, consumer claims, or user journey, logs are the tool to trace it. Yet, I feel as software engineers, we do not ...Dec 14, 2023 · 5 min readsurabhisuman.in