corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08c5a-6ed1-7388-bd7e-8f76e16f2ff0

Web Application Security: CSRF and XSS Prevention

unclesp1d3r.github.io · published 1 May 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unclesp1d3r.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
63
Words captured
25,261

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://owasp.org/www-community/attacks/csrf
owasp.org
https://owasp.org/www-community/xss-filter-evasion-cheatsheet
owasp.org
https://owasp.org/www-pdf-archive/2019-02-22_-_OWASP_Content_Security_Policy_4_-_Cheat_Sheet.pdf
owasp.org
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf
nvlpubs.nist.gov
https://www.iso.org/standard/54534.html
iso.org
https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4-0.pdf
docs-prv.pcisecuritystandards.org
https://www.w3.org/TR/CSP3/
w3.org
https://w3c.github.io/trusted-types/dist/spec/
w3c.github.io
https://www.w3.org/TR/SRI/
w3.org
https://www.zaproxy.org/
zaproxy.org
https://portswigger.net/burp
portswigger.net
https://sqlmap.org/
sqlmap.org
XSStrike
github.com
https://nostarch.com/tangledweb
nostarch.com
https://www.wiley.com/en-us/Web+Application+Hacker%27s+Handbook%3A+Finding+and+Exploiting+Security+Flaws%2C+2nd+Edition-p-9781118026472
wiley.com
https://www.manning.com/books/ironclad-java
manning.com
https://asecuritysite.com/browser
asecuritysite.com
https://www.oreilly.com/library/view/web-security-testing/9780596514839/
oreilly.com
https://tools.ietf.org/html/rfc7231
tools.ietf.org
https://tools.ietf.org/html/rfc6265
tools.ietf.org
https://web.dev/samesite-cookies-explained/
web.dev
https://tools.ietf.org/html/rfc6797
tools.ietf.org
https://tools.ietf.org/html/rfc7469
tools.ietf.org
https://owasp.org/www-project-java-encoder/
owasp.org
https://owasp.org/www-project-antisamy/
owasp.org
https://github.com/cure53/DOMPurify
github.com
https://developers.google.com/closure/templates/
developers.google.com
https://twig.symfony.com/
twig.symfony.com
https://handlebarsjs.com/
handlebarsjs.com
https://developers.google.com/web/tools/chrome-devtools/security
developers.google.com
https://developer.mozilla.org/en-US/docs/Tools
developer.mozilla.org
https://csp-evaluator.withgoogle.com/
csp-evaluator.withgoogle.com
https://owasp.org/www-pdf-archive/OWASP_Testing_Guide_v5.pdf
owasp.org
https://www.pentest-standard.org/
pentest-standard.org
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-115.pdf
nvlpubs.nist.gov
https://www.crest-approved.org/
crest-approved.org
https://web.dev/security/
web.dev
https://www.microsoft.com/en-us/securityengineering/sdl/
microsoft.com
https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+Coding+Standards
wiki.sei.cmu.edu
https://infosec.mozilla.org/guidelines/web_security
infosec.mozilla.org
https://blog.twitter.com/engineering/en_us/topics/infrastructure/2019/twitter-security-best-practices
blog.twitter.com
https://developers.facebook.com/docs/facebook-login/security-best-practices/
developers.facebook.com
https://owasp.org/www-project-modsecurity-core-rule-set/
owasp.org
https://www.cloudflare.com/waf/
cloudflare.com
https://aws.amazon.com/waf/
aws.amazon.com
https://docs.microsoft.com/en-us/azure/web-application-firewall/
docs.microsoft.com
https://www.akamai.com/us/en/products/security/kona-site-defender.jsp
akamai.com
https://owasp.org/www-project-secure-headers/
owasp.org
New helper added: Security Headers – Quickly and easily assess the security of your HTTP response headers..
securityheaders.com
https://observatory.mozilla.org/
observatory.mozilla.org
https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://nvd.nist.gov/
nvd.nist.gov
https://cve.mitre.org/
cve.mitre.org
https://www.exploit-db.com/
exploit-db.com
https://osv.dev/
osv.dev
https://gdpr-info.eu/art-32-gdpr/
gdpr-info.eu
https://www.oag.ca.gov/privacy/ccpa
oag.ca.gov
https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/index.html
hhs.gov
https://bsky.app/intent/compose?text=Web%20Application%20Security:%20CSRF%20and%20XSS%20Prevention+https://unclesp1d3r.github.io/posts/2023-05-01-web-application-security-csrf-and-xss-prevention/
bsky.app
https://www.linkedin.com/shareArticle?mini=true&url=https://unclesp1d3r.github.io/posts/2023-05-01-web-application-security-csrf-and-xss-prevention/&title=Web%20Application%20Security:%20CSRF%20and%20XSS%20Prevention
linkedin.com
https://share.joinmastodon.org/
share.joinmastodon.org
https://reddit.com/submit/?url=https://unclesp1d3r.github.io/posts/2023-05-01-web-application-security-csrf-and-xss-prevention/&resubmit=true&title=Web%20Application%20Security:%20CSRF%20and%20XSS%20Prevention
reddit.com
https://twitter.com/intent/tweet/?url=https://unclesp1d3r.github.io/posts/2023-05-01-web-application-security-csrf-and-xss-prevention/&text=Web%20Application%20Security:%20CSRF%20and%20XSS%20Prevention
twitter.com