PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Secure Coding Practices: Mastering URL Encoding for Enhanced Web Security

hackerone.com | vulnerability | #secure-coding | #web-security | #url-encoding
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne's secure coding guide to URL encoding: how it neutralizes injection attacks, the nuanced differences between encoding URL components and query strings, and practical rules for keeping user input from breaking URL structure.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
blog · hackerone.com
The Top 5 Most Common Security Issues I Discover When Reviewing Code
A veteran code reviewer counts down the five security issues he finds most often, starting with PII and secrets leaking into logs and poor cryptography choices, with Python and Ruby examples.
Back