CSRF（クロスサイトリクエストフォージェリ）攻撃の対策方法と国内・国外の被害事例、攻撃の目的や動機などを紹介する記事です。| 熱血！ヒートウェー部
Include Security's latest blog post covers Cross-Site WebSocket Hijacking and how modern browser security features do (or don't) protect users. We discuss Total Cookie Protection in Firefox, Private Network Access in Chrome, and review the SameSite attribute's role in CSWH attacks. The post includes a few brief case studies based on situations encountered during real world testing, in addition to a simple test site that can be hosted by readers to explore each of the vulnerability conditions.| Include Security Research Blog
Website with the collection of all the cheat sheets of the project.| cheatsheetseries.owasp.org
Website with the collection of all the cheat sheets of the project.| cheatsheetseries.owasp.org
A message I’m very used to seeing – but does XSS have to mean game over for web security? There’s a persistent belief among web security people that cross-site scripting (XSS) is a “gam…| Neil Madden
Sites can now explicitly mark their cookies for cross-site usage. Learn how to mark up your cookies to ensure that your first-party and third-party cookies continue to work after this change is implemented.| web.dev
Website with the collection of all the cheat sheets of the project.| cheatsheetseries.owasp.org
A hands-on beginner's guide to what CSRF attacks are and how to prevent them.| victorzhou.com
infosec.mozilla.org : Guidelines, principles published on https://infosec.mozilla.org| infosec.mozilla.org
OpenID Connect Discovery 1.0 incorporating errata set 2| openid.net
Website with the collection of all the cheat sheets of the project.| cheatsheetseries.owasp.org
Cross Site Request Forgery (CSRF) on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.| owasp.org