← All writing
Topic
Security
3 articles tagged Security.
How k-Anonymity Password Breach Checks Work (and Building One)
Check whether a password has been breached without ever sending it - the clever cryptographic trick behind Have I Been Pwned, and how to build on it.
SecurityCryptographyPrivacy
Preventing SSRF in Node.js: Safe Outbound Requests from User Input
Any time your server fetches a user-supplied URL you risk SSRF. How the attack works and how to shut it down - including the redirect gotcha.
SecurityNode.jsBackend
Getting an A on Security Headers: CSP, HSTS & Friends
The six response headers that close common browser-side attacks, how to add them at nginx, and how to write a CSP that does not break your site.
SecuritynginxCSP