Category "security"

Cypress Using security certificate in automation with cypress

With cypress I need to automate an application that currently uses a security certificate, I've never automated it this way. When I go to run cypress calling th

I see some big company using firefox version 45.x.x to connect to their vpn, is there any concern of doing this? [closed]

why not just use usual vpn tools? like outline or openvpn or any else, is there any security concern? and of course that's an old version of f

Need Assistance with Security assessment on Flutter compiled binaries

I'm developing an android app using flutter but during vulnerability assessment client have raised security concerns on flutter compiled arm-based binaries. NX

Handle Security exceptions in Spring Boot Resource Server

How can I get my custom ResponseEntityExceptionHandler or OAuth2ExceptionRenderer to handle Exceptions raised by Spring security on a pure resource server? We

Applying ServiceAccount specific OPA policies through Gatekeeper in kubernetes

We are trying to replace our existing PSPs in kubernetes with OPA policies using Gatekeeper. I'm using the default templates provided by Gatekeeper https://gith

How to tell if a user is logged in with http only cookies and JWT in react (client-side)

So I'm trying to follow the security best practices and I'm sending my JWT token over my React app in a only-secure http-only cookie. This works fine for requ

enable firewall port 22 on ec2 server after disable it

Step error: 1. sudo ufw enable 2. Command may disrupt existing ssh connections. Proceed with operation (y|n)? y 3. exit Before ssh again and can not access. On

Does the size of the prime number in Shamir's Secret Sharing affect the security of the sharding?

I've been working on an implementation of Shamir's Secret Sharing, and was wondering if the prime number selected will impact on the security. This is mainly be

Create secKey form data/hex/bytes using SecKeyCreateWithData give nil

I'm new to encryption. i want to create public seckey from data but i always get nil. Please help me. I need this public key as seckey to create a shared secret

Why can't Mozilla observatory detect the http security headers on my website anymore?

A few months ago, I added security headers to all of the pages on my website. The Mozilla Observatory detected the changes then and the score increased to B+. T

How to hide Yii Web Framework name from Wappalyzer?

I'm trying to hide the framework name Yii from Wappalyzer plugin in Chrome/Firefox. I need to hide the framework name as a part of security audit. I've turned

How to add http Headers in react js app's response

I have a react js application. I want to add some http headers in the every response that's being returned from the app. Could you please suggest how to impleme

Secure Node API for React Front End

I’m building a React application with a Node backend. In the backend I have an API that just talks to a database and I can deploy the API and the React ap

AWS CodeBuild - Security Implications of Enabling Docker Layer Cache

When creating a Codebuild project it's possible to configure a cache in the Artifacts section to speed up subsequent builds. Docker layer cache is one of the op

Resolving Azure Container registry images vulnerabilities

I use the following image openjdk:11-jdk as a base image to create an image that just executes a .jar file, but I get the following security warning from Azure

Protect media content from copy or redistribution in Android

I want to i)stream media content to android device ii)read media content from sdcard of the android device. But the media content should be secured.No other

VB.NET Core 6, Hashing password in (Win form) using SHA512 - Visual Basic

I am trying to build an application where security and encryption are a high concern. I am using Visual Studio 2022 and VB.NET 6.0 (I searched for 3 days now an

Bulletproof way to prevent user specified file names from using relative path elements in a Node.JS app?

I am creating a Node.JS app that allows users to edit various documents. A sub-directory is created on the server for each user using their user ID for the sub

PFXExportCertStoreEx to export private and public keys

I have used PFXExportCertStoreEx API to successfully export public and private key of a RSA certificate from Windows key store. Can the same PFXExportCertStoreE

how to hide nextjs api routes from being directly accessible through url?

Is there any way to make next.js API routes response data hidden when accessing it through URL? I want to hide the routes because there is some data I don't wan