Peter Firmstone
9,962 viewsJEP 411: Java's Security Model and the Principle of Least Privilege
Java, like most platforms or languages has layers of security, this article lookS at the Authorization layer and how JEP 411 relates to it.
Category
Security
Peter Firmstone
9,962 views
Nicolas Frankel
2,422 viewsGetting Started Hacking Third-Party APIs on the JVM
Some alternatives that allow you to make third-party APIs behave in a way that their designers didn't intend to!
Peter Firmstone
7,744 viewsWhy JEP 411 Will Have a Negative Impact on Java Security
SecurityManager, foundation to build secure software, on its own is insufficient to limit users & software to the least privilege principle.
Brian Vermeer
9,877 viewsSanitize All Input! Sanitize All Input! Sanitize All Input!
Cross-site scripting (XSS) is a well-known issue and mostly utilized in JavaScript applications. However, Java is not immune to this!
Brian Vermeer
4,032 viewsPreventing YAML Parsing Vulnerabilities in Java
With anchors, you can create a YAML bomb! The tremendous amount of (nested) objects will cause a memory overload.
Brian Vermeer
4,606 viewsFix Java Security Issues While Coding in IntelliJ IDEA
Let’s see how we can integrate security and secure development into IntelliJ IDEA using the new Snyk vulnerability scanner plugin!
Baruch Sadogursky
6,546 viewsNamespace Shadowing (a.k.a. “Dependency Confusion”) Attack
The npm Registry is vulnerable to supply chain namespace shadowing, also known as “Dependency Confusion” attacks!
Brian Vermeer
10,912 views8 Best Practices to Prevent SQL Injection Attacks
SQL injection, when a user adds untrusted data to a database query, is one of the most dangerous vulnerabilities for online applications.
Brian Vermeer
3,434 viewsSecure Code Review Best Practices (Part 2)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!
Brian Vermeer
5,256 viewsSecure Code Review Best Practices (Part 1)
Code reviews are hard to do well. Particularly when you’re not entirely sure about the errors you should be looking for!