Cross‑site scripting (XSS) remains one of the most frequently reported web vulnerabilities—not because developers are unaware of it, but because many deployed mitigations address symptoms rather than ...

Cross-Site Scripting (XSS) is often underestimated as a minor vulnerability. In reality, XSS can open the door to more severe attacks when combined with other vulnerabilities. This post is the second ...

The PowerShell script can be used to report which OS build a Windows 11/10 computer is currently on as well as which update is the latest update available to the device. It can also report on all ...

Experienced Lead Software Engineer with a diverse skill set, now in a managerial role in the tech industry. Experienced Lead Software Engineer with a diverse skill set, now in a managerial role in the ...

Non-sanitized usage of insecure document methods. We found some vulnerabilities in the app.js file where user controlled data in methods like innerHTML, outerHTML or document.write is used that can ...

This is a tricky one to fix dur to the testing required to make sure nothing is broken. This affects _CvSvg and CvDatePicker. AppScan report "Insecure Use of InnerHTML or OuterHTML" This is a false ...

HTMX is the HTML extension syntax that replaces JavaScript with simple markup. It could change the course of web development. HTMX lets you use an extended HTML syntax instead of JavaScript to achieve ...