Click any tag below to further narrow down your results
Links
This article discusses the alarming trend of users inadvertently sharing sensitive data, like passwords and credentials, on online code formatting tools. The authors reveal their investigation into two popular tools, JSONFormatter and CodeBeautify, where they uncovered thousands of exposed secrets due to a lack of user awareness about the shareable nature of saved content.
API developers must be aware of various HTTP edge cases that can lead to serious vulnerabilities and performance issues. The article discusses critical problems such as range header mishandling, content-type enforcement, and request smuggling, emphasizing the importance of proper configuration and validation in web applications.