Sep 19, 2025 · 6 min read · A defence-first guide to Cross-Site Scripting: learn types of XSS, how attackers think conceptually, safe vulnerable-pattern examples and secure fixes, plus practical Content Security Policy guidance and detection strategies. Introduction Cross-Site ...
Join discussion
May 4, 2025 · 4 min read · Today I noticed the Report-To response header and learned that it’s a header that the browser consumes / uses and sends reports. For example, I noticed this while I was trying to apply to many companies on https://www.instahyre.com/ automatically usi...
Join discussion
Jul 8, 2024 · 5 min read · Skip to TLDR Introduction Content Security Policy (CSP) provides mechanisms for websites to restrict content that browsers will be allowed to load. It is the holy grail for client side web application security. A strong policy can provide monumental ...
Join discussion