#web-security
#web-security

fromSitePoint Forums | Web Development & Design Community

Angular

Adding CORS to Your BoxLang APIs

Node JS

Why can't I get the content using `fetch`

fromHackernoon

4 years ago

Web development

A Developer's Guide to Same-Origin Policy (SOP) and Cross-Origin Resource Sharing (CORS) | HackerNoon

fromRaymondcamden

fromSitePoint Forums | Web Development & Design Community

Angular

Adding CORS to Your BoxLang APIs

Node JS

Why can't I get the content using `fetch`

CORS issues occur when a web application attempts to access resources from a different origin without permission.

Fed up with AI scraping your content? This open-source bot blocker can help - here's how

Over half of web visits are from data scrapers, prompting the need for protective measures like Anubis.

fromSitePoint Forums | Web Development & Design Community

3 weeks ago

How Let's Encrypt made the internet safer and HTTPS standard - and free

SSL was then, and is now, the minimum security a safe website should provide to its users. The protocol was also a major pain to set up and expensive to boot.

Privacy technologies

fromTheregister

3 weeks ago

Let's Encrypt rolls out free IP address certificates

Let's Encrypt now provides free digital certificates for IP addresses.

Namrata Hinduja Geneva, Switzerland (Swiss)- Malware Using Service Workers

Service workers can pose security risks if from unrecognized sources.

Regularly cleaning service workers is advisable for maintaining browser security.

#cybersecurity

fromThe Hacker News

Marketing tech

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month

fromIT Pro

Artificial intelligence

AI is helping bad bots take over the internet

fromTechzine Global

Web frameworks

The browser is riddled with bugs, 2025 may squash them

SquareX's initiative emphasizes the urgent need to address browser security vulnerabilities as web browsers are critical yet often overlooked in cybersecurity.

JavaScript

Bloomberg

The article discusses a common web security measure that confirms user identity to prevent fraud.

Marketing tech

fromThe Hacker News

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month

A large-scale cybersecurity campaign is compromising legitimate websites through malicious JavaScript injections utilizing an obfuscation technique known as JSFireTruck.

Artificial intelligence

fromIT Pro

AI is helping bad bots take over the internet

Automated bot traffic, now at 51%, exceeds human activity online, raising serious security concerns for businesses.

Web frameworks

fromTechzine Global

The browser is riddled with bugs, 2025 may squash them

SquareX's initiative emphasizes the urgent need to address browser security vulnerabilities as web browsers are critical yet often overlooked in cybersecurity.

JavaScript

Bloomberg

more#cybersecurity

fromCSO Online

Google patches third zero-day flaw in Chrome this year

Chrome's V8 engine has a serious vulnerability that can be exploited via malicious web pages.

Google restricts bug details until most users can update to protect them.

fromArs Technica

Two certificate authorities booted from the good graces of Chrome

Google's Chrome will stop trusting certificates from Chunghwa Telecom and Netlock due to observed compliance failures.

Pardon Our Interruption

"Ensure that your browser is configured to allow cookies and JavaScript, as disabling either can trigger bot detection mechanisms on websites."

#browser-issues

Web frameworks

Pardon Our Interruption

2 months ago

Web frameworks

Pardon Our Interruption

Web frameworks

Pardon Our Interruption

2 months ago

Web frameworks

Pardon Our Interruption

Meta and Yandex are de-anonymizing Android users' web browsing identifiers

Meta and Yandex are using tracking systems to bypass privacy protections, revealing users' identities.

fromTheregister

Chrome preps fix for browser history spying

When this technique first emerged, this could be done by including a script on the page that iterates through all the links on the page using the browser's window.getComputedStyle method and records the color used to render them.

Privacy technologies

fromThe Hacker News

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

Threat actors are using the mu-plugins directory in WordPress sites to conceal malicious code with the goal of maintaining persistent remote access and redirecting site visitors to bogus sites.

Web development

You have 4 days to update Firefox before everything breaks

On March 14, 2025, a root certificate expired for Mozilla projects, necessitating all Firefox users to update to version 128 or risk losing functionality.

Privacy technologies

Information security

fromHackernoon

The Internet Is Full of Duplicate Requests-Here's How Smart Developers Prevent Them | HackerNoon

Request security is critical in web application development to prevent data leaks and financial errors.

Implementing idempotency keys prevents duplicate operations and maintains data integrity.

Privacy technologies

Google Chrome is killing more extensions than you think - is your old favorite on the list?

Manifest V3 enhances Chrome security but blocks unsupported extensions, increasing user challenges.

Tech industry

fromTheregister

Cloudflare dishes up the web dirt for 2024

Global internet traffic grew by 17.2% in 2023, with the US responsible for a large share of bot traffic.

JavaScript

Bloomberg

Unusual network activity can trigger security measures that require user verification.

8 months ago

JavaScript

Bloomberg

Unusual network activity can lead to security prompts to verify user authenticity.

8 months ago

JavaScript

Bloomberg

Unusual network activity can trigger automated security protocols requiring user verification.

Information security