--- title: "#application-security articles | Hashnode" description: "Explore 342 articles tagged #application-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/application-security" --- Tag # #application-security 342 posts · 53 followers [Milan Nikic](https://hashnode.com/@nick79) · [1d ago](https://hashnode.com/posts/cross-site-scripting-xss-in-java-and-react-reflected-and-stored-xss-part-1/6af30aeb5f0f17eb1bf10a48) ### [Cross-Site Scripting (XSS) in Java and React: Reflected and Stored XSS (Part 1)](https://securitydepth.hashnode.dev/cross-site-scripting-xss-in-java-and-react-reflected-and-stored-xss-part-1?utm_source=hashnode&utm_medium=feed) Prevent reflected and stored XSS in Java and React with practical examples of output encoding, safe rendering, and HTML sanitization. 20 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/cross-site-scripting-xss-in-java-and-react-reflected-and-stored-xss-part-1?utm_source=hashnode&utm_medium=feed) [Prithwiraj Bose](https://hashnode.com/@sribasu) · [Nov 1](https://hashnode.com/posts/a-safer-exit-from-request-incremental-migration-for-legacy-node-js-services/6ae7a645757a0ce0ca958181) ### [A Safer Exit From \`request\`: Incremental Migration for Legacy Node.js Services](https://sribasu.hashnode.dev/a-safer-exit-from-request-incremental-migration-for-legacy-node-js-services?utm_source=hashnode&utm_medium=feed) Why changing an HTTP client is an application-compatibility project, and how to reduce the blast radius without overstating what a wrapper can fix. 6 min read · [sribasu.hashnode.dev](https://sribasu.hashnode.dev/a-safer-exit-from-request-incremental-migration-for-legacy-node-js-services?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 31](https://hashnode.com/posts/implementing-shopify-gdpr-compliance-webhooks-for-customer-data-privacy/6ae5c9319a1e5a1fc84ccf10) ### [Implementing Shopify GDPR Compliance Webhooks for Customer Data Privacy](https://cruxtab-technologies.hashnode.dev/implementing-shopify-gdpr-compliance-webhooks-for-customer-data-privacy?utm_source=hashnode&utm_medium=feed) Learn how to implement Shopify customers/data\_request, customers/redact, and shop/redact webhooks with authentication and reliable data cleanup. 4 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/implementing-shopify-gdpr-compliance-webhooks-for-customer-data-privacy?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 31](https://hashnode.com/posts/security-audit-of-a-shopify-app-gdpr-data-isolation-secrets-and-submission-protection/6ae5c837448ce84aa6278530) ### [Security Audit of a Shopify App: GDPR, Data Isolation, Secrets, and Submission Protection](https://cruxtab-technologies.hashnode.dev/security-audit-of-a-shopify-app-gdpr-data-isolation-secrets-and-submission-protection?utm_source=hashnode&utm_medium=feed) Explore six important Shopify app security risks involving GDPR webhooks, cross-shop data access, exposed credentials, form abuse, and HTML injection. 4 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/security-audit-of-a-shopify-app-gdpr-data-isolation-secrets-and-submission-protection?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 30](https://hashnode.com/posts/designing-secure-webhooks-for-multi-tenant-applications/6ae476152a07474216b3df86) ### [Designing Secure Webhooks for Multi-Tenant Applications](https://cruxtab-technologies.hashnode.dev/designing-secure-webhooks-for-multi-tenant-applications?utm_source=hashnode&utm_medium=feed) Learn how to secure generic webhooks with server-side validation, tenant isolation, credential protection, and protection against server-side request forgery. 2 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/designing-secure-webhooks-for-multi-tenant-applications?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 30](https://hashnode.com/posts/protecting-api-credentials-in-shopify-app-integrations/6ae46497558620bf6a5b1f89) ### [Protecting API Credentials in Shopify App Integrations](https://cruxtab-technologies.hashnode.dev/protecting-api-credentials-in-shopify-app-integrations?utm_source=hashnode&utm_medium=feed) Learn how to protect API keys, service-account credentials, and webhook URLs in Shopify applications using server-side processing and secure configuration. 3 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/protecting-api-credentials-in-shopify-app-integrations?utm_source=hashnode&utm_medium=feed) [Cruxtab Technologies Pvt. Ltd.](https://hashnode.com/@cruxtab) · [Oct 29](https://hashnode.com/posts/designing-privacy-aware-error-notifications-for-web-applications/6ae31ce5b3a7911e01ea830b) ### [Designing Privacy-Aware Error Notifications for Web Applications](https://cruxtab-technologies.hashnode.dev/designing-privacy-aware-error-notifications-for-web-applications?utm_source=hashnode&utm_medium=feed) Learn how to reduce sensitive data exposure in Slack error alerts through data minimization, URL sanitization, access controls, and testing. 3 min read · [cruxtab-technologies.hashnode.dev](https://cruxtab-technologies.hashnode.dev/designing-privacy-aware-error-notifications-for-web-applications?utm_source=hashnode&utm_medium=feed) [Nash Hasan](https://hashnode.com/@edtechniti) · [Oct 23](https://hashnode.com/posts/autonomous-codebase-security-auditing-agent-skills/6adb56df1e14674ebf376498) ### [Autonomous Codebase Security Auditing: Dissecting Cloudflare’s Security-Audit Skill, Multi-Agent Verification, and Institutional Hardening](https://blog.edtechniti.com/autonomous-codebase-security-auditing-agent-skills?utm_source=hashnode&utm_medium=feed) A multi-agent auditing loop pairs attack surface ledgers with skeptical verification to cut false positives and protect sovereign data. 11 min read · [blog.edtechniti.com](https://blog.edtechniti.com/autonomous-codebase-security-auditing-agent-skills?utm_source=hashnode&utm_medium=feed) [vidit](https://hashnode.com/@Viditp) · [Oct 22](https://hashnode.com/posts/php2shell-cve-2026-109618-109619-remediation/6ada1416301845217940e7af) ### [PHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry Point](https://viditp.hashnode.dev/php2shell-cve-2026-109618-109619-remediation?utm_source=hashnode&utm_medium=feed) Inside CVE-2026-109618 and CVE-2026-109619 — how memory corruption can lead to unauthenticated remote code execution, why the exposure is so widespread, and what defenders must do now. 19 min read · [viditp.hashnode.dev](https://viditp.hashnode.dev/php2shell-cve-2026-109618-109619-remediation?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Oct 21](https://hashnode.com/posts/xml-external-entity-injection-a-security-architect-s-perspective-part-2/6ad8818ba7508b2879f9bd09) ### [XML external entity injection: A security architect's perspective (Part 2)](https://securitydepth.hashnode.dev/xml-external-entity-injection-a-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed) Disabling DTDs in one parser doesn't scale. How to eliminate XXE architecturally: central parser policy, gateway validation, and dependency control. 18 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/xml-external-entity-injection-a-security-architect-s-perspective-part-2?utm_source=hashnode&utm_medium=feed)