2013 articles with this tag
An HTML element that lets a page offer different image files for different screen sizes, formats or conditions, such as a tighter crop on phones or an AVIF vers...
Embedding third-party content such as maps, videos, forms and widgets with iframes, and the attributes that limit what embedded content can do. Where most proje...
How websites store small pieces of data in the browser, and the attributes such as Secure, HttpOnly and SameSite that control how cookies are sent and accessed....
The browser mechanism, known as CORS, that decides whether a page from one origin may read responses from another origin, controlled by response headers. At a g...
A browser feature that checks a script or stylesheet loaded from a CDN against a cryptographic hash, refusing to run it if the file has been altered. What is at...
A class of vulnerability, known as XSS, where an attacker gets malicious script to run in other users' browsers through content a site displays without proper h...
An attack, known as CSRF, where a malicious site causes a logged-in user's browser to send an unwanted request to another site, such as changing an email addres...
A vulnerability where user input is inserted into a database query in a way that lets an attacker change the query, reading or modifying data they should not ac...
The Open Worldwide Application Security Project's list of the most critical web application security risks, updated periodically from industry data. At a glance...
How applications store user passwords so that a database breach does not reveal them, using slow, salted password hashing algorithms. What is at stake Passwords...
Limiting how many requests a client can make in a given time, especially to login, password reset and API endpoints, to slow down automated attacks. The key fig...
Managing the security of third-party packages a website depends on, from npm and Composer libraries to plugins and themes. Where most projects go wrong The usua...
Showing 1,680 of 2,013
