Collaborate Disseminate
I have an angular 6 application where Content Security Policy headers are applied via a meta tag.
On one of the pages there is an iframe for which those headers should not be applied.
For some reason parent CSP headers are … Continue reading Prevent iframe from inheriting CSP headers
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 12
Connection: close
Date: Tue, 25 Sep 2018 12:59:56 GMT
x-amzn-RequestId: xxxxxxxxxxx
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type,Authorization,A… Continue reading Getting confusion that this responce indicate CORS vulnerability
As stated here, https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS at “Credentialed requests and wildcards”. Quote:
When responding to a credentialed request, the server must specify an
origin in the value of the Ac… Continue reading Web-Application with CORS Origin: * using authorization header
I have read somewhere that when storing sensitive information on a website you should include cache-control: no-store for telling the browser not to store that information on the local system. But I think when cache-control: … Continue reading Is cache-control: no-cache enough for sensitive information like bank accounts, etc.?
I have an nginx server running an instance of and express/nodejs server.
I was going through the logs to see what was being requested, and I noticed a few normal attempts for common flaws in things like word press, but what… Continue reading Suspiscious HTTP request to nginx server in server log, what is it?
My friend recently received a suspicious email for an iTunes gift card purchase from “Apple Store” with a header that displayed a fake “To:” address for orders@apple-store.com.
Unsurprisingly, this turned out to be a phish… Continue reading How did this email list a fake recipient?
I have a backend web server that serves an API (over HTTPS) to a frontend web server on a different subdomain. It uses CORS to allow this.
The CORS spec directs you to not send the CORS headers if the origin isn’t present or… Continue reading When implementing CORS, should I check for a correct HOST header in my webapp?
I have several web applications running on my server (Debian 8 running Apache). One of my customers wants to improve the security of his app, after having some security audits carried out by a third-party company he showed me… Continue reading X-Frame-Options header on redirect
I’ve read multiple times that leaked ETags from Webservers are considered an information leakage vulnerability.
For example in the server response headers:
ETag: X/”1234-56789″
But I have not found a reason why this is a … Continue reading Damage of a leaked ETag
In some basic steps:
POST Request containing a photo with multipart/form-data.
HTTP/1.1 302 Found respond with redirect back to formular
Redirect to initial formular.
In case 1 we are able to control the filename allowing… Continue reading How to bypass response Location in order to obtain content XSS?