corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0bb99-e0bb-70ef-840d-cf9b9614d9c5

Can you ever (safely) include credentials in a URL?

neilmadden.blog · published 16 January 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at neilmadden.blog Wayback capture
1blogs citing
First cited
17 Dec 2024
Most recent
17 Dec 2024
Rank this month
not ranked
Links from this post
41
Words captured
5,088

Cited by

Blog
In the post
Date
ogbe.net
HTTP Basic Authentication for personal package.el repositories Read at the source ↗
17 Dec 2024

Links from this post

Link
Host
https://manning.com/books/api-security-in-action
manning.com
Towards a standard for bearer token URLs Read at the source ↗
neilmadden.blog
https://en.wikipedia.org/wiki/Basic_access_authentication
en.wikipedia.org
https://en.wikipedia.org/wiki/Digest_access_authentication
en.wikipedia.org
https://tools.ietf.org/html/rfc7617
tools.ietf.org
https://support.detectify.com/customer/portal/articles/1969819-login-csrf
support.detectify.com
https://en.wikipedia.org/wiki/Principle_of_least_privilege
en.wikipedia.org
https://en.wikipedia.org/wiki/Capability-based_security
en.wikipedia.org
https://en.wikipedia.org/wiki/OAuth
en.wikipedia.org
https://kantarainitiative.org/confluence/display/uma/Home
kantarainitiative.org
http://wiki.erights.org/wiki/Walnut/Secure_Distributed_Computing
wiki.erights.org
https://en.wikipedia.org/wiki/Confused_deputy_problem
en.wikipedia.org
https://en.wikipedia.org/wiki/Cross-site_request_forgery
en.wikipedia.org
https://en.m.wikipedia.org/wiki/Object-capability_model
en.m.wikipedia.org
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referer
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/API/Document/referrer
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
developer.mozilla.org
https://support.cloudflare.com/hc/en-us/articles/204144518-SSL-FAQ
support.cloudflare.com
http://waterken.sourceforge.net/web-key/
waterken.sourceforge.net
https://developer.mozilla.org/en-US/docs/Web/API/Window/location
developer.mozilla.org
https://en.wikipedia.org/wiki/Single-page_application
en.wikipedia.org
https://stackoverflow.com/a/2305927/2333532
stackoverflow.com
https://tools.ietf.org/html/rfc6750
tools.ietf.org
https://en.wikipedia.org/wiki/Cross-origin_resource_sharing
en.wikipedia.org
Moving away from UUIDs Read at the source ↗
neilmadden.blog
https://tools.ietf.org/html/rfc3986
tools.ietf.org
https://tools.ietf.org/html/rfc7009
tools.ietf.org
https://developer.mozilla.org/en-US/docs/Web/API/HTMLHyperlinkElementUtils/username
developer.mozilla.org
https://en.wikipedia.org/wiki/Content_Security_Policy
en.wikipedia.org
https://en.wikipedia.org/wiki/HATEOAS
en.wikipedia.org
http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven
roy.gbiv.com
https://json-ld.org
json-ld.org
https://www.w3.org/wiki/LinkHeader
w3.org
https://support.google.com/docs/answer/2494822?co=GENIE.Platform%3DDesktop&hl=en
support.google.com
https://tools.ietf.org/html/draft-ietf-oauth-mtls-12
tools.ietf.org
https://docs.microsoft.com/en-us/windows-server/security/token-binding/introducing-token-binding
docs.microsoft.com
https://ai.google/research/pubs/pub41892
ai.google
https://support.google.com/docs/answer/2494822
support.google.com
https://www.dropbox.com/developers/chooser
dropbox.com
https://www.dropbox.com/developers/saver
dropbox.com