Web Development Security

Knowledge base of practical and applicable Web development security. This directory is about the information and defensive aspect of web hacking, for the offensive aspect visit /hacking.
  • The dangers of trusting HTTP headers

    HTTP headers can be set by users and they can be very dangerous if you are using their values anywhere in the application logic, or are writing or storing (and eventually writing) their values anywh...