Tag: #csp
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 2 posts
Frontend Security 2025 — XSS, CSRF, CSP, Trusted Types, JWT, OAuth, PKCE, Passkeys, Supply Chain, SRI (S6 E9)
XSS still tops every CVE report. But 2024–2025 shipped real tools to defeat it: Trusted Types, CSP v3 with strict-dynamic, Sanitizer API. Passkeys replaced passwords for serious products. Supply-chain attacks made SRI +
2026-04-15 · 6 min read #frontend#security#xss#csrf#cspWeb Security Attack and Defense in Practice — XSS, CSRF, SSRF, Clickjacking, Prototype Pollution, Supply Chain, CORS Complete Guide (2025)
If the previous Security post was about "security for the organization", this one is about "the vulnerabilities lodged in your code". The three kinds of XSS with CSP nonce and Trusted Types, CSRF after SameSite, the SSRF
2026-04-15 · 12 min read #web-security#xss#csrf#ssrf#clickjacking