Collaborate Disseminate
We have a site builder, allows users to add/modify JS/HTML/CSS. Is it possible to provide a global authentication for it?
I mean users login once but can interact with all sites as their own names. Those sites should not be able to steal u… Continue reading Secure authentication for sites which allow user to modify js/html
Here (https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy) it is mentioned
The port number is checked separately by the browser. Any call to document.domain, including document.domain = document.domain, causes the por… Continue reading What is meaning of setting port number to NULL in document.domain call?
A few days ago I got an email to our dpo email address from a person I don’t know who claims to be a Security Researcher. The email is well written and contains a POC with screenshots of a CORS Exploit (SOP Bypassed). My first reaction is … Continue reading Vulnerability Reporting from "random" dude
My system composes of NuxtJs and AdonisJs application.
Adonis handles csrf tokens for us by sending:
set-cookie: adonis-session=XXX; Path=/; HttpOnly
set-cookie: XSRF-TOKEN=XXX; Max-Age=7200; Path=/; SameSite=Strict
set-cookie: adonis-sess… Continue reading CSRF token not sent when calling the back-end?
We can use CORS to restrict API calls to a specific host in a web app. How to do the same for native mobile app?
I want to restrict API calls from my app alone.
Is it possible to do so?
Continue reading Can we use CORS policy to restrict API calls from native mobile app?
I asked the same question on Stack Overflow, but I got no answers and I was suggested to ask it here.
Abbreviations used:
CORP: Cross Origin Resource Policy
CORS: Cross Origin Resource Sharing
CORB: Cross Origin Read Blocking
SSCAs: specu… Continue reading Why are cross-origin isolation and CORB/CORP both needed? [closed]
I’m trying to get 3rd party cookies to work on major mid-year 2020 browsers [1]. It’s as simple as pointing an iframe to an external URL to make a cookied request and probably get the response thereafter (and the external site explicitly … Continue reading Allowing 3rd-party cookies in major 2020 browsers
CORS is a HTTP Suite header that “relax” the SOP. One of the CORS misconfigurations is about to reflect without reg exp the “Origin” client header into “ACAO” response header. If it happens with “ACAC:true” every cross-domain HTTP request … Continue reading Cross-Domain Request is a CSRF Attack? (CORS)
Is it possible to send a custom POST CORS request with json data?
I found that the website example.com is vulnerable to CORS and it’s accepting my origin header:
https://mywebsite.com
, however the request is a POST one and if i try withou… Continue reading Is it possible to send a POST CORS request with json data?
HTTP request coming from mobile comes from localhost domain, however White Listing localhost in backend open up chances for CORS attacks.
How to secure or filter HTTP request coming from mobile devices?
Continue reading How to protect HTTP requests coming from mobile from CORS attacks?