Security Tips
Security Tip: Encoding/Serialising Data
[Tip#36] Encoding/serialising data can be risky if you're not using the correct functions.
Security Tips
Security Tip: Leaking Data After Changes
[Tip#35] It's easy to make innocent changes to one part of your app and forget to check how that flows into other parts of your app
Security Tips
Security Tip: Encrypting Environment Files?
[Tip#34] Laravel features the ability to encrypt environment files... but do you need to use it?
Security Tips
Security Tip: Restricting Local File Access
[Tip#33] We can easily restrict access to files on remote storage like S3, but what about local files?
Security Tips
Security Tip: Multiple Rate Limits
[Tip#32] For times when one rate limit just won't do!
Security Tips
Security Tip: Canary Tokens
[Tip#31] These are my favourite simple security trick to let you know if someone is poking around in your stuff.
Security Tips
OWASP Tip: A10:2021 – Server-Side Request Forgery (SSRF)
Our final entry in the OWASP Top 10 series - be aware of what your servers can access!
Security Tips
OWASP Tip: A09:2021 – Security Logging and Monitoring Failures
You do have logging enabled, right?
Security Tips
OWASP Tip: A07:2021 – Identification and Authentication Failures
Don't get confused with authorisation, we're talking authENTICation this week.
Security Tips
OWASP Tip: A06:2021 – Vulnerable and Outdated Components
Keep your stuff updated!!
Security Tips
OWASP Tip: A04:2021 – Insecure Design
It's hard to build a secure system if the design is inherently insecure.
Security Tips
OWASP Tip: A03:2021 – Injection
i.e. Cross-Site Scripting (XSS), SQL injection (SQLi), and Command Injection