Tagged with security
Client-side JavaScript can create security issues when it injects unsafe content, trusts the wrong source, or executes arbitrary code.
JavaScript security basics: XSS, CSRF, safe DOM updates, and avoiding eval
Safe React code avoids dangerous HTML injection, unnecessary direct DOM manipulation, state mutation, and side effects during render.
React security and best practices
Authentication verifies who the user is, while authorization decides what that user is allowed to do.
How does authentication differ from authorization in Django?
CSRF protection ensures a state-changing request comes from your site and includes a valid token.
What is CSRF in Django?
CORS middleware tells browsers which frontends are allowed to call your API across origins.
How do CORS settings work in FastAPI?
Authentication is often implemented through dependencies that validate tokens, sessions, or API keys before route logic runs.
How do you handle authentication in FastAPI?
ConfigMaps store non-sensitive config, while Secrets are meant for sensitive values such as tokens or passwords.
ConfigMap vs Secret in Kubernetes
Security groups are stateful instance-level firewalls, while NACLs are stateless subnet-level filters.
Security group vs NACL in AWS
IAM manages who can do what in AWS through users, roles, policies, and least-privilege permissions.
What is AWS IAM?
Environment variables separate configuration from code and help vary behavior across environments.
Why are environment variables used?