Author Archives: Arunabh

What is the precise security term for the process of keeping an ongoing record of any changes to data in cloud environments?

Posted on by

In the context of cloud security frameworks (such as CCSP/SOC), I am looking for the specific term used to describe the process of keeping an ongoing record of any changes to data.
While terms like logging, auditing, versioning, and change… Continue reading What is the precise security term for the process of keeping an ongoing record of any changes to data in cloud environments?→

Can an attacker exploit HTTP headers via Cross-Site Scripting (XSS) in PHP to bypass output encoding?

Posted on by

I’m working on a PHP web application where user input is reflected back to the user, but we are carefully using functions like htmlspecialchars() with appropriate flags (ENT_QUOTES | ENT_HTML5, UTF-8 charset) wherever data is outputted int… Continue reading Can an attacker exploit HTTP headers via Cross-Site Scripting (XSS) in PHP to bypass output encoding?→

Can an attacker use HTTP header injection or response splitting to trigger XSS despite HTML escaping?

Posted on by

I’m working on a PHP web application where user input is reflected back to the user, but we are carefully using functions like htmlspecialchars() with appropriate flags (ENT_QUOTES | ENT_HTML5, UTF-8 charset) wherever data is outputted int… Continue reading Can an attacker use HTTP header injection or response splitting to trigger XSS despite HTML escaping?→