0 views collected around this technical thread.
A recent supply‑chain poisoning incident injected malicious post‑install scripts into the popular Vant component library and Rspack build tool, stealing cloud credentials and mining Monero, prompting developers to upgrade to safe versions and reconsider npm dependency risks.
This article explains how to protect user data in Vue applications by using HTTPS, encryption algorithms, hash functions, and digital signatures, providing practical code examples for setting up an HTTPS server with Node.js/Express, encrypting data with crypto‑js, and verifying data integrity.
This article explores various web client tracking technologies, including first-party and third-party cookies, Flash cookies, and advanced browser fingerprinting techniques like Canvas, AudioContext, and WebRTC, while also discussing practical countermeasures to protect user privacy and prevent unauthorized tracking across modern web browsers.
This article provides a comprehensive overview of Cross‑Site Scripting (XSS), covering its definition, impact, underlying mechanisms, classification, common injection vectors, defensive strategies, practical Q&A, and a curated list of reference resources for developers and security professionals.
This article explains what XSS attacks are, categorizes their types, and demonstrates how React’s automatic escaping, JSX compilation, and internal element validation work together to mitigate XSS vulnerabilities while highlighting common unsafe patterns and server‑side defenses.
This article explains the fundamentals of Cross‑Site Scripting (XSS) attacks, presents real‑world examples, classifies stored, reflected, and DOM‑based XSS, and provides comprehensive prevention, detection, and mitigation techniques for frontend developers, including proper escaping, whitelist schemes, CSP, and secure coding practices.