--- title: "#secure-coding articles | Hashnode" description: "Explore 127 articles tagged #secure-coding on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/secure-coding" --- Tag # #secure-coding 127 posts · 11 followers [Muhammad Shahis](https://hashnode.com/@shahis) · [Oct 23](https://hashnode.com/posts/the-hidden-danger-in-wordpress-how-xml-rpc-and-pingback-can-expose-your-server/6adba5b57c5f8e912fcc49ba) ### [The Hidden Danger in WordPress: How XML-RPC and Pingback Can Expose Your Server](https://httpsportflio-latest-318ave1yf-shahiskhans-projectsvercelapp.hashnode.dev/the-hidden-danger-in-wordpress-how-xml-rpc-and-pingback-can-expose-your-server?utm_source=hashnode&utm_medium=feed) Learn how WordPress XML-RPC & Pingback features expose servers to brute-force and SSRF attacks, plus practical steps to secure your site. 4 min read · [httpsportflio-latest-318ave1yf-shahiskhans-projectsvercelapp.hashnode.dev](https://httpsportflio-latest-318ave1yf-shahiskhans-projectsvercelapp.hashnode.dev/the-hidden-danger-in-wordpress-how-xml-rpc-and-pingback-can-expose-your-server?utm_source=hashnode&utm_medium=feed) [Milan Nikic](https://hashnode.com/@nick79) · [Oct 12](https://hashnode.com/posts/xml-external-entity-injection-secure-coding-in-java/6accdf4a1923ddc65fd9dd33) ### [XML external entity injection: Secure coding in Java](https://securitydepth.hashnode.dev/xml-external-entity-injection-secure-coding-in-java?utm_source=hashnode&utm_medium=feed) Learn how XXE injection works in Java and Spring, which XML parsers are vulnerable by default, and how to configure them securely. Part 1. 24 min read · [securitydepth.hashnode.dev](https://securitydepth.hashnode.dev/xml-external-entity-injection-secure-coding-in-java?utm_source=hashnode&utm_medium=feed) [TSI DEV Studio](https://hashnode.com/@tsidevstudio) · [Oct 7](https://hashnode.com/posts/why-i-built-a-decoy-vault-for-android-privacy/6ac5fd86401cbd8389c0ae25) ### [Why I Built a Decoy Vault for Android Privacy](https://tsidevstudio.hashnode.dev/why-i-built-a-decoy-vault-for-android-privacy?utm_source=hashnode&utm_medium=feed) Privacy is not always about hiding everything. Sometimes it is about choosing what you are comfortable showing. 4 min read · [tsidevstudio.hashnode.dev](https://tsidevstudio.hashnode.dev/why-i-built-a-decoy-vault-for-android-privacy?utm_source=hashnode&utm_medium=feed) [Mira Ezz-Eldin](https://hashnode.com/@mira3zzeldin) · [Sep 10](https://hashnode.com/posts/security-principles-hardcoding-the-safe-zones/6abfaf11914310f7da5deeb9) ### [Security Principles - Part III: Hardcoding the Safe Zones](https://rootshadow.hashnode.dev/security-principles-hardcoding-the-safe-zones?utm_source=hashnode&utm_medium=feed) Breaking down the architectural decisions in a biometric fintech payment system that were made before any vulnerability forced them. 9 min read · [rootshadow.hashnode.dev](https://rootshadow.hashnode.dev/security-principles-hardcoding-the-safe-zones?utm_source=hashnode&utm_medium=feed) [Arshad](https://hashnode.com/@arshadakl) · [Sep 5](https://hashnode.com/posts/how-a-profile-update-feature-could-drain-a-company-s-bank-account/6a9c5976d374389ef28f3114) ### [How a Profile Update Feature Could Drain a Company's Bank Account](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed) How a simple profile update flaw let users change credits, abuse premium AI agents, and create costly exposure for the platform. 6 min read · [blog.arshadakl.in](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed) [Mira Ezz-Eldin](https://hashnode.com/@mira3zzeldin) · [Aug 30](https://hashnode.com/posts/security-principles-a-system-is-not-its-intended-use/6abf9f5a9a105c3d0f1d6215) ### [Security Principles - Part II: A System is Not its Intended Use](https://rootshadow.hashnode.dev/security-principles-a-system-is-not-its-intended-use?utm_source=hashnode&utm_medium=feed) Walking through real STRIDE-driven findings in a biometric fintech payment system and what changes when "does it work" stops being the only question. 8 min read · [rootshadow.hashnode.dev](https://rootshadow.hashnode.dev/security-principles-a-system-is-not-its-intended-use?utm_source=hashnode&utm_medium=feed) [Mira Ezz-Eldin](https://hashnode.com/@mira3zzeldin) · [Aug 15](https://hashnode.com/posts/security-principles-trust-is-not-a-feeling/6a0c6d3a883727741159737c) ### [Security Principles - Part I: Trust Is Not a Feeling](https://rootshadow.hashnode.dev/security-principles-trust-is-not-a-feeling?utm_source=hashnode&utm_medium=feed) Learn why secure systems verify evidence instead of trusting claims, through lessons from a biometric fintech wallet and Zero Trust design. 10 min read · [rootshadow.hashnode.dev](https://rootshadow.hashnode.dev/security-principles-trust-is-not-a-feeling?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 13](https://hashnode.com/posts/common-web-application-technologies/6a7e0e84bc892488c6743968) ### [Common Web Application Technologies](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) Learn how Java, ASP.NET, PHP, Rails, SQL, XML, and SOAP work in web applications and where security weaknesses can appear during web pentesting. 7 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) [Narges Pourkamali](https://hashnode.com/@nargesprk) · [Aug 11](https://hashnode.com/posts/10-rules-for-secure-database-schema-design-before-writing-any-code/6a7b783bc7473a04423c95c8) ### [10 Rules for Secure Database Schema Design (Before Writing Any Code)](https://safeai.blog/10-rules-for-secure-database-schema-design-before-writing-any-code?utm_source=hashnode&utm_medium=feed) Designing a secure schema before coding is the foundation of data security throughout the software lifecycle. 12 min read · [safeai.blog](https://safeai.blog/10-rules-for-secure-database-schema-design-before-writing-any-code?utm_source=hashnode&utm_medium=feed) [Victor Wariboko-West](https://hashnode.com/@victorwest) · [Aug 1](https://hashnode.com/posts/7-security-mistakes-junior-developers-make-and-how-to-fix-them/6a6dac0dc4f49944035ee35a) ### [7 Security Mistakes Junior Developers Make (And How to Fix Them)](https://cybersage.hashnode.dev/7-security-mistakes-junior-developers-make-and-how-to-fix-them?utm_source=hashnode&utm_medium=feed) Common security mistakes junior developers make in Node, Express, and React apps — from broken auth checks to SQL injection — with real code fixes. 5 min read · [cybersage.hashnode.dev](https://cybersage.hashnode.dev/7-security-mistakes-junior-developers-make-and-how-to-fix-them?utm_source=hashnode&utm_medium=feed)