New posts in Appsec

Security risks of fetching user-supplied URLs

Is it safe to send sensitive data in the post body to an azure function?

Security implication if android app can be installed on emulator

How good are Angular Route Guards from a security standpoint?

Is an up-to-date browser secure on an out-of-date OS?

Firefox not deleting HTTP Basic authentication credentials although being instructed to do so

Split an application into user and admin parts for security reasons?

Are there any sequences other than ../ which will be intepreted as directory traversal in *nix or Windows?

How to prevent username and password matches when changing a username?

Best practices for automatic login URL's?