Editors' Pick

Trending Posts

Popular Post

Recent Posts

S …

Same-site cookie, a new protection against CSRF

CSRF has long been a well-known topic in the OWASP Top 10. Many protections and mitigations exist and are more or less easy to implement (synchronized token, custom request header, encrypted token, double submit cookie pattern,…). A new kid on the block has recently emerged and is increasingly supported by recent browsers: a very simple mitigation based on the SameSite cookie attribute.

Read more Details
P …

Progressive Web Apps

Introduction

Innovation in the front-end web development world can sometimes be seen as an endless and uncontrollable flow going in all directions without any form of organization or apparent master plan. Certainly, it is very difficult to keep track of all the new API and tools coming out every week. However, much of this noise is actually irrelevant when it comes to identify the global trends; the ideas that will get traction and be implemented at a large scale, defining the next status quo for the user experience on the web.

Read more Details