Explore our latest insights on the most interesting technologies.

Invisible code and XSS attacks

• Sylvain Pollet-Villard
• 11 Min To Read
• 19 Jul, 2023
• • Cybersecurity

Trojan: Attacks from the inside

XSS attacks were quite common at the time of the early web. They were used to steal cookies, to redirect users to malicious websites, to inject malicious code in the page, etc. Websites were more vulnerable to XSS at that time because they used a lot server-side templating with technologies like PHP or JSP, with very few built-in protections for injecting JavaScript code into HTML responses. Today, we are much more careful about escaping user inputs and evaluating HTML dynamically. We use frameworks like React or Vue.js to build our web applications, which are based on declarative templating that escape all HTML by default and encourage sending serialized data instead of HTML on the wire. Dynamic code evaluation is considered a bad practice and injection patterns are catched by code analysis tools like ESLint or SonarQube. XSS attacks have therefore to find more creative ways to inject malicious code into the page. If they can’t inject from the outside, they will try to inject from the inside, targeting the code of the application itself. They can do that directly through project dependencies or pull requests to open source projects, or indirectly through StackOverflow answers, blog posts, AI chatbots, etc.

Gitpod: Your mobile dev cloud IDE

• Ibrahim Gharbi
• 7 Min To Read
• 27 Jun, 2023
• • Development and programming

This article presents Gitpod from a mobile developer’s perspective and guides you through the process of creating an Android Studio IDE on the cloud using Gitpod, covering everything from workspace configuration to device connection.

Creating an iCalendar event with HTML content

• Yassine Benabbas
• 5 Min To Read
• 20 Jun, 2023
• • Software engineering

Introduction

One of the most used open standards open for exchanging calendar and scheduling information between users and computers is iCalendar. An iCalendar file is simply a text file with .ics extensions. Since this is open standard, it is supported by many apps, such as Outlook. The icalendar.org website provides a great introduction and some history about the iCalendar standard.

Spring Boot 3 and GraalVM

• Max Beckers
• 7 Min To Read
• 06 Jun, 2023
• • Development and programming

Spring Boot 3 comes with the support for native images. This is the part for GraalVM . GraalVM transitions from a just-in-time (JIT) compiler built into OpenJDK to an ahead-of-time (AOT) compilation. As a result, it speeds up the startup time and reduces the memory usage of (Micro-)Services, improving the efficiency for cloud environments.

Govmomi a VMware toolbox

• Valery Brasseur
• 6 Min To Read
• 18 Apr, 2023
• • Development and programming

What is Govmomi

Govmomi is an open-source library for managing VMware vSphere. It allows developers to create applications to manage VMware vSphere resources, such as virtual machines, networks and storage.

HSM in the cloud: opportunity or contradiction?

• Jurjen N.E. Bos
• 6 Min To Read
• 05 Apr, 2023
• • Cybersecurity

As many other companies, my employer (Worldline) is busy building cloud applications, and moving current applications to the cloud. Of course, cryptography is used in many ways in these applications. Many of these applications use HSMs (Host Security Modules) to improve the security of the cryptographic keys. This is what an HSM looks like: