Profile avatar
javanrasokat.bsky.social
Product Security @ Sage, Security Research & Speaker, OWASP Contributor, Hacker & Creator. Personal blog: https://javan.de
8 posts 385 followers 119 following
Posts 4 Comments 4

There’s been much debate about whether to redirect from HTTP to HTTPS in #ASVS (see: github.com/OWASP/ASVS/i...). Meanwhile, Mozilla Observatory rewards you with points for implementing this redirect. Thoughts?

submitted 51 days ago • 1 comment

I noticed Mozilla Observatory was updated... now embracing more fine granular tweaks, e.g. using frame-ancestors instead of XFO and to use SRI. Nice! developer.mozilla.org/en-US/observ...

submitted 51 days ago • 0 comments

Indirect #PromptInjection placed into a Response-Header. I guess no need for a "ai.robots.txt" anymore if we can handle them like this? ;-)

submitted 99 days ago • 1 comment

Starting into #bsky with a special share & shoutout: lyra.horse/blog/2024/09... fantastic write-up of a #securityresearch in today’s complex environment, by bypassing multiple browser defenses and even Sec-Fetch.

submitted 101 days ago • 0 comments