Securing Public Clients with OAuth 2.0 and PKCE
Learn how to implement OAuth 2.0 with PKCE to secure public clients like SPAs and mobile apps, eliminating the need for insecure client secrets.
Loading…
ReadMeFeed / Community knowledge
#web-security
Real questions. Useful conversations. Find the people who know your stack.
Implementing Secure Reactive Data Flow in Meteor 2.x
Learn how to implement the secure Meteor 2.x pattern using Publications for reactive reads and Methods for validated writes to prevent data leaks and ensure performance.
Protecting Remix Routes with Loader-Based Session Authentication
Learn how to secure Remix routes using server-side loaders and session cookies to prevent unauthorized access and eliminate client-side content flashing.
remixSecuring Data Writes in Meteor: Moving from Insecure to Methods
Stop relying on the 'insecure' package. Learn how to use Meteor Methods to create a secure server-side boundary while maintaining a snappy UI through latency compensation.
mongodb
javascriptManaging Content Security Policy with KrakenJS
Avoid CSP syntax errors and silent failures in Express. Learn how KrakenJS uses declarative policy objects to automate header generation, manage nonces, and implement violation reporting.
expressUnexpected file exposure in _site directory via Jekyll exclude configuration
Jekyll utilizes the exclude setting in _config.yml to prevent specific files, directories, or glob patterns from being copied into the final _site output folder. While files starting with an underscore are excluded by default, other sensitive environment files or custom data directories must be explicitly listed to avoid public exposure. A challenge arises w