· security
What's the best way to do authentication in modern applications
Where should your auth token live so an XSS bug can't steal it? Here's how to build auth that survives the crazy non-secure world we live in.
security
-
-
· securityGitHub Actions Cache Poisoning is eating open source
Angular. tj-actions. Cline. TanStack. The same class of attack has been quietly hijacking publish pipelines for two years. Here's what it is, how it works, and what you need to do today.
-
· securityHow to steal npm publish tokens by opening GitHub issues
A chain of vulnerabilities and pretty clever attack strategies led to the compromise of the Cline CLI. Let me explain what happened and what you can do to protect yourself.
-
· securityFortifying Vue.js Applications
This article discusses the top security vulnerabilities in Vue.js applications and provides recommendations for identifying and mitigating the risks.