Security (security)

My study notes of security training (day 3), including insecure direct references, broken access control, improper input validation, and software best practices.

24 January 2019 | security, http

My study notes of security training (day 2), including some ways of SQL injection, Cross-site scripting (XSS), and XML External Entity (XXE).

23 January 2019 | security, http, browser

My study notes of security training (Day 1), including web thread landscape (Java in particular), security tools, and some Juice shop training answers.

22 January 2019 | security, java, http

Today, I'd talk about how to install and configure ZA proxy for intercepting HTTP requests and responses in localhost in macOS.

04 May 2018 | web, proxy, security, http, macos

Today, I would like to share with you about how to secure your GWT application by using package com.google.gwt.safehtml. After reading this post, you’ll understand how to:

• Secure HTML using SafeHtml
• Secure URI using SafeUri
• Secure CSS using SafeStyles

24 August 2017 | security, gwt, web, java

My review note about book "Web Application Security: A Beginner's Guide", written by Bryan Sullivan and Vincent Liu.

20 July 2017 | security, web