DEV Community

#backend

Desenvolvimento do lado do servidor, APIs, bancos de dados e logica de negocios.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Building a Secure Employee Management System Using Ballerina, PostgreSQL, Docker, and React
shenali_chath_a97b8d9 profile

Building a Secure Employee Management System Using Ballerina, PostgreSQL, Docker, and React

#ballerina #backend #docker #postgres
Comments
4 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
rxkov profile
Rxkov

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
Webhook Signature Bypass: When the Receiver Skips the HMAC Check
rxkov profile
Rxkov

Webhook Signature Bypass: When the Receiver Skips the HMAC Check

#api #backend #cybersecurity #security
Comments
5 min read
Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately
rxkov profile
Rxkov

Web Cache Deception Against APIs: CDNs Cache What Backends Serve Privately

#api #backend #cybersecurity #security
Comments
6 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention
rxkov profile
Rxkov

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

#backend #cybersecurity #infosec #security
Comments
5 min read
Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug
rxkov profile
Rxkov

Working: Prototype Pollution in Node.js APIs Is a Process-Wide Trust Failure, Not a Library Bug

#backend #javascript #node #security
Comments
5 min read
HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control
rxkov profile
Rxkov

HTTP Verb Tampering in REST APIs: When OPTIONS and HEAD Bypass Access Control

#api #backend #cybersecurity #security
Comments
5 min read
Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access
rxkov profile
Rxkov

Working: OTel Spans Are Secret Stores — How Distributed Traces Leak Bearer Tokens to Anyone With Observability Access

#backend #cybersecurity #devops #security
Comments
4 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model
rxkov profile
Rxkov

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

#api #authentication #backend #security
Comments
4 min read
API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint
rxkov profile
Rxkov

API Key Scope Validation Failures: When 'Read-Only' Is a Documentation Claim, Not a Backend Constraint

#api #backend #cybersecurity #security
Comments
5 min read
SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE
rxkov profile
Rxkov

SSTI in APIs: When JSON Parameters Reach Template Engines and Become RCE

#api #backend #cybersecurity #security
Comments
5 min read
Working: Rate Limiters Key on Raw Paths — Routers Normalize After
rxkov profile
Rxkov

Working: Rate Limiters Key on Raw Paths — Routers Normalize After

#backend #cybersecurity #security
Comments
4 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
rxkov profile
Rxkov

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting
rxkov profile
Rxkov

Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting

#api #backend #cybersecurity #security
Comments
6 min read
REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS
rxkov profile
Rxkov

REST API File Upload Attack Chains: MIME Bypass, Path Traversal, and SVG-to-XSS

#api #backend #cybersecurity #security
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.