web-security
Safeguard articles tagged "web-security" — guides, analysis, and best practices for software supply chain and application security.
153 articles
universal-cookie: Package Review and Cookie Security Basics
A review of the universal cookie npm package: what it does in isomorphic apps, the advisory it inherited through its cookie dependency, and the cookie security flags that matter more than the library.
Webhooks Security: A Practical Checklist
Webhooks security is easy to get wrong because the endpoint has to trust an unauthenticated inbound request by default — here's the checklist that closes the common gaps.
What Is a Target URL? Definition and Security Implications
A target URL is the destination address a request, scan, or link is aimed at. Here is what the term means across different contexts and why getting it right matters for security testing and web safety.
Website Scanner: How It Works and What to Use
A website scanner probes a live site for security flaws like injection, misconfiguration, and known CVEs. Here is how the different scanner types work and when each one fits.
The OWASP Top Ten Vulnerabilities, Explained
The OWASP Top Ten vulnerabilities is the industry-standard list of the most critical web application security risks. Here is what the current 2025 edition covers and how to defend against each.
How to Run a Website Security Check (Free and Paid Methods)
A step-by-step website security check using free tools and paid platforms, from a quick URL scanner pass to authenticated scans and dependency analysis.
react-md-editor: Using @uiw/react-md-editor Securely
How to use react-md-editor safely: what @uiw/react-md-editor does, the XSS risk in markdown preview, and why rehype-sanitize is not optional for untrusted input.
git-dumper: How Exposed .git Directories Get Dumped and How to Stop It
git-dumper reconstructs an entire source tree from an exposed .git folder on a web server. Here is how the attack works and how to close the hole.
CORS in Node.js: What It Is and How to Configure It Securely
CORS in Node.js trips up almost every developer at some point. Here is what CORS actually does, why you need it, and how to configure it without opening a hole.
Hacking Websites: How Attacks Work and How to Defend Against Them
A defender's overview of how websites get compromised, the common attack classes behind real breaches, and the controls that stop them before they start.
Online Vulnerability Scan: How to Test Your App on the Web
What an online vulnerability scan actually checks, how hosted scanners differ from installed tools, and how to run one without breaking your production site.
Security Plugins for CMS and App Platforms: What They Actually Do
A security plugin can harden a CMS meaningfully, but it can't fix a vulnerable core install or a poorly coded theme — it's a layer, not a replacement for patching.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.