Liked
Stephen Rees-Carter :laravel: (@valorin@phpc.social)
Post details
Attached: 1 image One of my favourite (and oh so simple) hacker tricks is to abuse JSON support in APIs and pass TRUE instead of the actual API key. If the code does loose comparison, you don't need the key! π π πΏ https://securinglaravel.com/p/security-tip-type-juggling #PHP #Laravel
This post was filed under likes.
Interactions with this post
Interactions with this post
Below you can find the interactions that this page has had using WebMention.
Have you written a response to this post? Let me know the URL:
Do you not have a website set up with WebMention capabilities? You can use Comment Parade.