1.Two front doors: Module-level access in a Django GRC appblog | 2026-10-05 00:00 | about.gitlab.com | Original ↗ | .md | #access-control | #web-security | #grc
2.Cookie Chaos: How to bypass __Host and __Secure cookie prefixesresearch | 2025-09-03 14:46 | portswigger.net | Original ↗ | .md | #cookies | #asp-net | #unicode
3.Bypassing WAFs with the phantom $Version cookieresearch | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #web-security | #cookies | #waf-bypass
4.The Hidden Dangers of Crafting Your Own Regular Expressions for Input Validationblog | 2024-04-03 02:40 | hackerone.com | Original ↗ | .md | #denial-of-service | #web-security | #regex
5.Implementing and Auditing HTTPS in Django: Best Practicesblog | 2024-03-14 02:22 | hackerone.com | Original ↗ | .md | #web-security | #python | #tls
6.Django Rest Framework vs. Django-Ninja: A High-Level Comparisonblog | 2024-03-01 00:41 | hackerone.com | Original ↗ | .md | #python | #api | #django
7.Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applicationsvulnerability | 2024-01-24 07:55 | hackerone.com | Original ↗ | .md | #web-security | #python | #django
8.The Most Overlooked Server Permission Checksblog | 2022-06-23 16:00 | hackerone.com | Original ↗ | .md | #access-control | #code-review | #api-security
9.Pesky Server Auth Issues We’ve Foundblog | 2018-08-10 10:23 | hackerone.com | Original ↗ | .md | #code-review | #web-security | #api-security