Is RLS Being Abused?
DatabaseSecurityBackend
If you use Supabase, there is no getting around Row Level Security, or RLS. Create a table, try ...
#Security
5 posts
The Difference Between Authentication and Authorization
Personal researchSecurityWeb
Whenever the conversation turns to web system design or security, two words are guaranteed to sh...
HTTP Is Stateless, So How Can a Login Session Persist?
Personal researchWebSecurity
Study web development for any length of time and you will run into the line "HTTP is a stateless...
Where Should You Store Session Data? Which Option Is Actually Right?
Personal researchSecurityWeb
Say a requirement arrives: "users should stay logged in even across devices." Where, then, do yo...
Investigating Subresource Integrity (SRI): Should You Really Add It to JavaScript from External CDNs?
SecurityWebFrontend
Browse enough code that loads JavaScript or CSS from an external CDN, and sooner or later you ru...