Tag

#application-security

340 posts53 followers

Explore Hashnode

Alternatives

Cruxtab Technologies Pvt. Ltd.6h ago · 4 min read

Implementing Shopify GDPR Compliance Webhooks for Customer Data Privacy

Shopify applications may process customer information such as names, email addresses, phone numbers, and form submissions. Applications that handle this information need to support Shopify's privacy r

cruxtab-technologies.hashnode.dev

Cruxtab Technologies Pvt. Ltd.6h ago · 4 min read

Security Audit of a Shopify App: GDPR, Data Isolation, Secrets, and Submission Protection

Security is a fundamental requirement for every Shopify application, especially applications that collect customer information through storefront forms. A form builder handles customer submissions, me

cruxtab-technologies.hashnode.dev

Cruxtab Technologies Pvt. Ltd.1d ago · 2 min read

Designing Secure Webhooks for Multi-Tenant Applications

Webhooks allow one application to send information to another when an event occurs. For a form builder, a successful submission can trigger a request to an external endpoint. However, webhook integrat

cruxtab-technologies.hashnode.dev

Cruxtab Technologies Pvt. Ltd.1d ago · 3 min read

Protecting API Credentials in Shopify App Integrations

A form builder may connect to several third-party services. Each service can require its own credentials, webhook URL, or API key. These credentials allow an application to communicate with external s

cruxtab-technologies.hashnode.dev

Cruxtab Technologies Pvt. Ltd.2d ago · 3 min read

Designing Privacy-Aware Error Notifications for Web Applications

Error notifications are most useful when they provide enough context to diagnose a problem. But application errors can also contain sensitive information, especially when they include request URLs, cu

cruxtab-technologies.hashnode.dev

Nash HasanOct 23 · 11 min read

Autonomous Codebase Security Auditing: Dissecting Cloudflare’s Security-Audit Skill, Multi-Agent Verification, and Institutional Hardening

Autonomous codebase security auditing is an application security testing methodology that replaces deterministic static analysis and single-shot language model prompts with stateful, multi-phase adver

blog.edtechniti.com

viditOct 22 · 19 min read

PHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry Point

The Internet Has a PHP Problem Imagine visiting your favourite website, logging into your account, or making an online payment. Everything looks normal. There is no suspicious download, no malicious a

viditp.hashnode.dev

Milan NikicOct 21 · 18 min read

XML external entity injection: A security architect's perspective (Part 2)

In Part 1 of this series, we examined XXE injection from a developer's perspective, covering secure coding patterns across DocumentBuilderFactory, SAXParser, StAX, TransformerFactory, JAXB, and Jackso

securitydepth.hashnode.dev

Dimakatso SebataneOct 18 · 9 min read

Case Study: Cross-Tenant Data Exfiltration via Backup Restore

Category: Web Application SecurityVulnerability: Broken Object Level Authorization (BOLA / IDOR)CWE: CWE-639 — Authorization Bypass Through User-Controlled KeyOWASP: API1:2023 — Broken Object Level Au

ovawatch-security.hashnode.dev

Kazem MortazaviOct 15 · 4 min read

Web Application Scanning: How to Match the Tool to Your Organization

Choosing a web application scanner often starts with the wrong question. Teams compare feature lists, the table fills up with checkmarks, and nobody has agreed on how many applications the organizatio

securityland.hashnode.dev

Search Hashnode

Explore Hashnode

Trending tags this week

Implementing Shopify GDPR Compliance Webhooks for Customer Data Privacy

Security Audit of a Shopify App: GDPR, Data Isolation, Secrets, and Submission Protection

Designing Secure Webhooks for Multi-Tenant Applications

Protecting API Credentials in Shopify App Integrations

Designing Privacy-Aware Error Notifications for Web Applications

Autonomous Codebase Security Auditing: Dissecting Cloudflare’s Security-Audit Skill, Multi-Agent Verification, and Institutional Hardening

PHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry Point

XML external entity injection: A security architect's perspective (Part 2)

Case Study: Cross-Tenant Data Exfiltration via Backup Restore

Web Application Scanning: How to Match the Tool to Your Organization