Web App Security & OWASP Top 10.
From theory to practice.

G

Thread Web App Security & OWASP Top 10 3 weeks ago

How do you remediate Stored Cross-Site Scripting (XSS) and Broken Object Level Authorization (BOLA)?

Encode output, enforce CSP, and add server‑side object checks to eliminate stored XSS and BOLA.

Gaurav Bhasin Score 24

0 replies →

A

Thread Web App Security & OWASP Top 10 3 weeks ago

How to prevent SQL Injection (SQLi) vulnerabilities completely in modern web frameworks?

Prevent SQLi by exclusively using prepared statements/ORM bindings, strict validation, and CSP; never concatenate user input into SQL.

Aravind Patel Score 20

0 replies →

R

Thread Web App Security & OWASP Top 10 3 weeks ago

What is Cross-Site Request Forgery (CSRF) and how do anti-CSRF tokens protect state-changing POST requests?

Anti‑CSRF tokens tie each state‑changing request to a server‑generated secret, preventing forged submissions.

Rahul Sharma Score 20

0 replies →

I

Thread Web App Security & OWASP Top 10 3 weeks ago

How to fix Server-Side Request Forgery (SSRF) vulnerabilities in web applications processing remote URLs?

Validate and whitelist URLs, enforce network egress rules, and isolate fetches to prevent SSRF.

Ishaan Patel Score 20

0 replies →

R

Thread Web App Security & OWASP Top 10 3 weeks ago

What are the best practices for secure password hashing and session cookie storage?

Use Argon2id (or bcrypt $2b$) with proper parameters and set Secure, HttpOnly, SameSite=Strict cookies with short lifetimes.

Rajesh Sharma Score 20

0 replies →

G

Thread Web App Security & OWASP Top 10 3 weeks ago

How to conduct automated DAST scans using OWASP ZAP in CI/CD pipeline tests?

Integrate ZAP Docker in CI, run baseline and full scans with risk thresholds, and abort builds on high‑risk alerts.

Gaurav Bhasin Score 24

0 replies →