AppSec
XSS Tutorial: How Cross-Site Scripting Works and How to Stop It
A defender's XSS tutorial covering the three attack types, why they still slip through, and the encoding and CSP controls that actually prevent them.
Apr 30, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAppSec
java.lang.NullPointerException: Causes, Fixes, and Prevention
What actually throws java.lang.NullPointerException, how to read the helpful messages modern JVMs print, and the handful of patterns that keep null out of your call paths.
Apr 30, 20267 min read
AppSec
XSS Script Example: How Cross-Site Scripting Works and How to Stop It
A clear XSS script example shows how untrusted input becomes executable code in a victim's browser. Here is the anatomy of the three XSS types and the defenses that actually work.
Apr 29, 20266 min read
AppSec
com.fasterxml.jackson.databind: Maven Coordinates, Modules, and Version Strategy
com.fasterxml.jackson.databind is the Java package, not the Maven groupId, and that mixup breaks builds weekly. Here are the correct coordinates, the module map, and a version strategy that survives audits.
Apr 29, 20266 min read
AppSec
How to Fix Cross-Site Scripting Vulnerabilities in Java (With Examples)
A practical walkthrough of how to fix cross site scripting vulnerabilities in Java: context-aware output encoding, template auto-escaping, and where servlet code goes wrong.
Apr 28, 20266 min read
AppSec
Application Security Scanning: How the Pieces Fit Together
Application security scanning spans SAST, DAST, SCA, and secrets detection. Here is what each type finds, where it fits in CI, and how to avoid alert fatigue.
Apr 28, 20266 min read
AppSec
The OWASP Top 10, Explained: The Web App Risks That Matter Most
The OWASP Top 10 is the industry's reference list of the most critical web application security risks. Here is what each category means and how to defend against it.
Apr 27, 20266 min read
AppSec
Showdown Markdown Converter: XSS Risks and Safe Configuration
The npm showdown library converts Markdown to HTML without sanitizing it — by design. Here is where the XSS risk actually lives and how to render untrusted Markdown safely.
Apr 27, 20267 min read
AppSec
White Box Pen Testing: How It Works and When to Use It
White box pen testing gives the tester full access to source, architecture, and credentials. Here's how it differs from black box, when to choose it, and the tools involved.
Apr 27, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.