posts/ — tag: security_□×
Security Headers Missed the HTML Pages
My Logger Redacted `monkey` Because It Contains `key`
Install-Script Permissions Can Outlive a Dependency
The Rate Limiter Trusted a Client-Controlled Header
The Tests Made a Case for Deleting the Shell Script
The Upload Allowlist Didn't Bind the Content-Type Header
An SVG Is Not an Image
Two SQLite Libraries, One Deleted Password
Your PDF Remembers What You Deleted
Every XML Feature Is One You Turn Off
Norway Is Not a Boolean
ZIP Files Are Read Backwards
pnpm 11 Made the Safe Thing the Default
Your AI Coding Agent Can Read Every Secret on Your Machine
Buying Supply Chain Security in 2026: A Vendor Map
Sandboxing AI Agents Without Buying Anything
Python and Rust Have the Same Supply Chain Problem as NPM
Your Software Is Mostly Strangers' Code
SAST vs AI PR Review: Two Tools, Different Jobs
npmx.dev Is the NPM Frontend We've Been Asking For
Your Data Lake's Vulnerability Problem Is Really an Identity Problem
Your Data Lake Has a Permissions Problem
Why javascript:void(0) Needs to Stay in the Past
What Companies Are Actually Paying for Application Security
Local Secrets Manager - Dotenv Encrypter
Claude Code Now Has Two Different Security Review Tools
Defending Your Node Modules: Security Tools and When to Rewrite Dependencies
27 posts tagged "security"
START
llbbl.exeprojects/posts/experiments/subscribe.dlg
© 2026v1.0.0