Collaborate Disseminate
Is the following redirect mechanism exploitable? Meaning redirecting to another domain.
This: https://www.example.com/?return=/info.php
Redirects to: https://www.example.com/info.php
This: https://www.ex… Continue reading Unvalidated open redirect in path of URL
I’m writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve S/MIME encrypted (and maybe also signed) emails from different accounts.
“Easy to deploy and easy to use!” Every software vendor seems to use this slogan to assure prospects that once they purchase the license, the rest of the journey is going to be a breeze, and the client is going to recover their investment i… Continue reading Bromium Customers Praise Fast, Easy Deployment
Subresource integrity basically lets me know that a resource I’m about to download is valid, because the hash of its contents matches what I expect.
But this assumes that I’m already running on some trusted and verified code… Continue reading How does subresource integrity actually help?
I have a domain in .name zone registered in Germany. A couple of days ago I received an email, here is the English part of it:
Dear customer (the German text has my name instead of “customer” here),
by the guideline… Continue reading Strange Email Validation request – should I worry about it?
Many Pythonistas are familiar with using decorators, but far fewer understand what’s happening under the hood and can write their own. It takes a little effort to learn their subtleties but, once grasped, they’re a great tool for writing concise, elegant Python.
This post will briefly introduce the concept, start with a basic decorator implementation, then walk through a few more involved examples one by one.
Decorators are most commonly used with the @decorator syntax. You may have seen Python that looks something like these examples.
To understand what a decorator does, we first have to …read more
Many Pythonistas are familiar with using decorators, but far fewer understand what’s happening under the hood and can write their own. It takes a little effort to learn their subtleties but, once grasped, they’re a great tool for writing concise, elegant Python.
This post will briefly introduce the concept, start with a basic decorator implementation, then walk through a few more involved examples one by one.
Decorators are most commonly used with the @decorator syntax. You may have seen Python that looks something like these examples.
To understand what a decorator does, we first have to …read more
I was wondering what will be the risks when I am only working with semantic templates like handlesbars, ejs or pug?
My app is a educational game for elementary schools, involving no money or anything of value, so I am not worried about sophisticated attackers having any interest in this. Still, I would like to follow best practices in case… Continue reading Is a constant pepper at risk if an attacker knows the value and hash?
Suppose my site needs to register for a member account with email, and the email needs to be verified and activated. I forbid users to register with same email twice. When it does, should I remind the user to activate the ema… Continue reading When a user tries to register with an unactivated email again, should I tell user that the emails has not been activated?