Security
Secure File Upload Handling
A defense-in-depth checklist for handling user-uploaded files safely, covering validation, storage, serving, and the mistakes that lead to real compromises.
3 min read
Tag
Application Security
6 articles
Security
Dependency Risk: Lockfiles, Audits, and SBOMs
How lockfiles, dependency audits, and software bills of materials work together to manage the risk of running someone else's code in production.
3 min read
Security
SSRF: The Cloud-Era Vulnerability and Its Defenses
Why server-side request forgery became a top-tier risk in the cloud metadata era, and the layered defenses that actually contain it.
3 min read
Security
Security Headers: CSP, HSTS, and Frame Options, and What Each Stops
A practical walkthrough of the HTTP security headers that matter most, what specific attack each one mitigates, and how to roll them out without breaking your site.
3 min read
Security
Password Storage: bcrypt, scrypt, Argon2, and Why Plain Hashing Fails
Why fast general-purpose hashes like SHA-256 are unsafe for passwords, and how bcrypt, scrypt, and Argon2 defend against modern offline cracking hardware.
3 min read
Security
Secrets Management for Application Developers
API keys and database passwords leak through predictable channels — git history, logs, error messages — long before an actual attacker gets involved.
3 min read