Articles & Guides
Useful resources for web developers and system administrators
Found 68 · Security · Reset
Security
CORS Explained: Cross-Origin Resource Sharing Guide
Understand CORS — how cross-origin requests work, preflight checks, headers, common errors, and how to configure CORS correctly for your web application.
Security
WAF: What It Is and How It Protects Your Site
What is a Web Application Firewall (WAF), how it works, and what attacks it prevents. WAF types, configuration, and best practices.
Security
Cookie Security Flags: HttpOnly, Secure, SameSite
Understanding cookie security flags: HttpOnly, Secure, SameSite. How to protect user sessions from XSS, CSRF, and interception attacks.
Security
Open Server Ports: How to Check and Why It Matters
Guide to checking open ports: TCP/UDP, common ports, scanning tools, security risks, and best practices for hardening your server.
Security
Content Security Policy (CSP) — A Complete Configuration Guide
What is Content Security Policy, how to configure the CSP header, which directives to use. Configuration examples and common mistakes.
Security
HSTS — What It Is and Why Your Website Needs It
What is HSTS (HTTP Strict Transport Security), how it protects against attacks, how to configure the header, and how to avoid common mistakes. A practical guide.
Security
API Security: Best Practices for Protection
Best practices for API security: authentication, rate limiting, CORS, HTTPS, data validation, and protection against common threats.
Security
Security Headers: CSP, HSTS, X-Frame-Options, nosniff
Which HTTP security headers to send and how: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, nosniff and Referrer-Policy.