DNS rebinding is an example of a blind server side request forgery vulnerability. Blind Server Side Request Forgery (SSRF) vulnerabilities arise when an application can be induced into issuing a back-end HTTP request to a supplied URL, but the response from the back-end is not returned in the application’s front-end response. Source portswigger... Read more 04 Feb 2024 - 1 minute read
Everything in Javascript is an object; this includes functions, strings, numbers, booleans, arrays and objects. Read more about objects in Javascript here Every object has a private property (the [[Prototype]] property) which holds a link to another object called its prototype. The prototype of an object has a prototype of its own and in this wa... Read more 30 Jun 2019 - 5 minute read
In this article, I’ll explain: What continuous integration is Why I set it up for guidebook, a project I started to share my thoughts on building NodeJS applications How to setup continuous integration using Circle CI What is Continuous Integration (Definition)? Continuous integration, also known as CI, is the process of automating the ... Read more 08 Feb 2019 - 3 minute read
This is the second part of a 2-series article in which I talk about setting up a NodeJS project. The first article focused on using ES6 modules in NodeJS. This article dives into enforcing a consistent code format and style in a NodeJS project. Why Enforce a Code Format and Style? In any project, private or public, with more than one contributo... Read more 07 Jan 2019 - 5 minute read
While working on Node Guidebook, a project I started to share my thoughts on building NodeJS applications, I needed to answers a couple of questions. Which do I use? commonjs (aka module.exports and require) or the new ES6 modules? Note: As at NodeJS v11, ES6 modules are not supported in NodeJS. How do I ensure a consistent code format a... Read more 06 Jan 2019 - 3 minute read