SuperGeekery: A blog probably of interest only to nerds by John F Morton.
Welcome to my link library. These are not links to content I have created unless you see that mentioned in the link’s description. These are links I found interesting enough to want to keep track of. If you read Craft Link List, the Craft CMS newsletter I used to write, this page is a replacement of sorts for that exercise. Enough talk. Let’s hit the links.
HTTP Security Headers are essential to any website. Learn about the HSTS header, Content Security Policy header CSP, XSS protection, cache control, strict transport security, set-cookie header, and many more http headers in this comprehensive guide with examples and take your website security header game to the next level with Darkrelay.
HTML Forms have powerful validation mechanisms, but they are heavily underused. In fact, not many people even know much about them. Is this because of some flaw in their design? Let’s explore.
In this paper I’ll show you how to compromise websites by using esoteric web features to turn their caches into exploit delivery systems
Password generator
Tips for Keeping All Frontend Applications Secure
A resource when you don’t have a good back up plan after a hack. A service that promised to clean malware and viruses from a website.
Learn and Test DMARC
Learn and Test DMARC
The Terrapin attack is a prefix truncation attack targeting the SSH protocol, where the integrity of SSH’s secure channel is compromised by manipulating sequence numbers during the handshake, allowing an attacker to remove messages from the secure channel without detection.
The OWASP Top 10 is the reference standard for the most critical web application security risks. Adopting the OWASP Top 10 is perhaps the most effective first step towards changing your software development culture focused on producing secure code.
A small gist with Javascript to try to prevent iframe embedding of your content.
Website with the collection of all the cheat sheets of the project.
OWASP Top 10 module that adds a few security improvements in form of a customizable server middlewares to your Nuxt application. All middlewares can be modified or disabled if needed. They can also be configured to work only on certain routes. By default all middlewares are configured to work globally.