Articles tagged with Web Development.
A race-photography platform's 'find your face' product gated photos behind facial search in the UI, but the API behind it had no auth at all. Here's how a handful of curl requests turned into a full export of two events' photo libraries, and why access-control flags in a JSON response mean nothing if the server never checks them.
Find out what happens when you share a webpage which has a canonical URL different from the current page URL. Will the Share Sheet use the current URL or the canonical URL?
This is the least amount of code for a minimal editor in a browser that can support HTML/CSS/JS edit and preview kinda environment. It goes without saying once you look at this in detail 😂 - this is not meant to be used in production setups. This ca...
A client-side OTP, an unrestricted file upload and hardcoded database credentials gave me full control of a fantasy sports platform. When I got in, I found someone else had already planted a web shell. Here is the disclosure, with the sensitive bits redacted.
Some time ago I created this repo to dump some design to codes I used to do before. It has some beautiful designs/mockups created by other designers, which are converted to code. Feel free to use any of them or contribute to the project in any way po...
AMP ( Accelerated Mobile Pages ) is a technology known for developing super fast web pages on mobile clients. It has gained a lot of importance and is being implemented widely. Even Hashnode supports AMP (https://hashnode.com/post/hashnode-now-suppor...
Table of Contents Cool stuff about Parcel.js Introduction to Parcel.js How easy is it to get started with Parcel.js Terminology Comparison Tug of war Issues/problems with Parcel Conclusion/My opinions Cool stuff about Parcel It has ~29000 Github ...
About three and a half years ago when I was in my first year of engineering all I would do was to keep designing perfect layouts. I cannot stress how much that changed my designing/developing skills. Now I feel like I...
This happens often, if you are developing some documentaion generator or code highlighter make sure to do this.
Headless browsers are really making some good contribution in browser automations and testing areas. Most of which are used for unit/end to end testing, while few are just perfect for browser automation. Invisible...