YPYogeshwar Peelainexploitnotes.hashnode.dev·Sep 1 · 6 min readWebVersePro : SnowedOut writeup1. Overview The target is "Pinehollow Plow Tracker," a fictional city snow-plow dashboard running on PHP 8.2.33 behind Cloudflare. The page accepts a zone GET parameter that "centers" the map on a nam00
SKSreeram K Sincode-as-a-story.hashnode.dev·Jun 6 · 4 min readWhat is CSP (Content Security Policy)?Story Time Imagine you’re managing a high security office building, for example, Reserve Bank of India (RBI) Headquarters. Every day, different type of people try to enter this building including empl00
MTMittal Technologiesinmittal-tech.hashnode.dev·May 22 · 3 min readModern Web Security Mistakes I Still See in Production AppsNot the clever CTF-style vulnerabilities. The boring, preventable ones. The ones that ship because someone was under deadline pressure and planned to "fix it later." Here are the mistakes I keep findi00
WBWiktoria Blomgren Strandberginpentesting-dvwa.hashnode.dev·Mar 14 · 16 min readCSP Bypass in DVWA1 Introduction In this post, the Content Security Policy (CSP) Bypass vulnerability in the Damn Vulnerable Web Application (DVWA) is described. The objective for attacks on all levels is to bypass the00
TITech Insights Hubintopperblog.hashnode.dev·Feb 13 · 6 min readContent Security Policy: XSS Attack PreventionContent Role: pillar Content Security Policy: XSS Attack Prevention CSP headers and nonce-based script execution for web applications Cross-Site Scripting (XSS) attacks remain one of the most prevalent web security vulnerabilities, accounting for app...00
DMDeep Modakindeepwritestech.hashnode.dev·Oct 27, 2025 · 5 min readBoost Web Security with HTTP Headers in NGINXWeb Security and HTTP Security Headers Web security is an ever-evolving challenge. One effective way to protect your web applications from common attacks is by using HTTP Security Headers. These headers instruct browsers on how to handle your website...00
SSSaurav Sharmainblog.sorv.dev·Jun 3, 2025 · 4 min readImplementing Strict Content Security Policy ( CSP ) in Vue.js & Django with NginxIntroduction Content Security Policy (CSP) is a security standard that helps prevent cross-site scripting (XSS), clickjacking, and other code-injection attacks by whitelisting trusted sources of conte00
KNKaruppiah Natarajaninkaruppiah.dev·May 4, 2025 · 4 min readMay 4th 2025: Today I Learned (TIL)Today I noticed the Report-To response header and learned that it’s a header that the browser consumes / uses and sends reports. For example, I noticed this while I was trying to apply to many companies on https://www.instahyre.com/ automatically usi...00
WWavePlayinwaveplay.hashnode.dev·Sep 17, 2024 · 3 min readPatch Your Discord Activity’s Network Requests for Smooth CSP ComplianceWhen running a Discord Activity through Discord, you may encounter Content Security Policy (CSP) issues. You can fix these by making sure network requests follow Discord Proxy rules. This can be done manually... or you can let @robojs/patch handle it...00
SBSumir Brootainbreachforce.net·Jul 8, 2024 · 5 min readImplementing a Secure Content Security Policy (CSP)Skip to TLDR Introduction Content Security Policy (CSP) provides mechanisms for websites to restrict content that browsers will be allowed to load. It is the holy grail for client side web application security. A strong policy can provide monumental ...00
