Preventing Mass-Assignment Vulnerabilities with Ecto Changesets
Learn how to use Ecto Changesets to prevent mass-assignment vulnerabilities by implementing strict data casting and separating application validation from database constraints.
Loading…
ReadMeFeed / Community knowledge
#security
Real questions. Useful conversations. Find the people who know your stack.
ectoIntegrating Django’s Built‑In Authentication: An Architecture Note
Explore Django’s built‑in authentication stack: requirements, minimal architecture, trust boundaries, operational checks, failure modes, and when a redesign is needed. Practical examples and verification steps included.
djangoUsing ARM64 Pointer Authentication to Harden Return‑Address Security
Learn how ARMv8.3‑A Pointer Authentication (PAC) signs pointers to stop return‑oriented programming attacks, how to enable it with compiler flags, and how to verify support on your hardware.
aarch64Diagnosing XXE Exposure in Java XML Parsers: Checks, Fixes, and Escalation
Recognize XXE exposure in Java XML parsers, trace it to parser settings, apply targeted fixes, and verify with a canary payload.
java@nonreentrant Decorator vs Manual Boolean Guard for Vyper Reentrancy Protection
Context When securing state-changing external functions in Vyper against reentrancy, two documented patterns exist: the built-in @nonreentrant decorator and a manually managed boolean state variable. The decorator reserves a storage slot and reverts on reentry, while a manual guard offers custom revert or skip logic but demands discipline across every exit p
vyperManaging Sensitive Configuration with Replit Secrets
Learn how to use Replit Secrets to store API keys and database credentials securely, preventing accidental leaks in public projects through server-side environment injection.
python
replitUsing PKCE to Secure Public Clients in OAuth 2.0
Learn how PKCE lets SPAs and mobile apps use the OAuth 2.0 authorization code flow without storing a client secret, and see a concrete curl‑based example.
NGINX Rate Limiting: Protect Your Server with limit_req_zone in Minutes
Stop abusive traffic with NGINX's built‑in rate limiting. This guide explains limit_req_zone, shows a practical config, tests it, and discusses trade‑offs.
nginxDiagnosing and Controlling GraphQL Query Complexity: A Practical Guide
Learn how to detect, measure, and cap GraphQL query complexity to prevent performance regressions and DoS attacks. Follow our step‑by‑step diagnostic guide, example configs, and escalation rules.
graphql