It seems there's a lot of information out there on how to retrieve and view sensitive data in terraform, but not a lot on how to prevent viewing of it via the nonsensitive function. For example, suppose I have a…
I want to set up a OAuth 2.0 flow in my code. I want my code, to be limited to specific scopes (even if someone accidentally writes some extra code to request additional ones). Let's assume I want my code…
I have this very large and complex server application that amongst the numerous opensource tools that are baked into it, CouchDB 3.3.3 is one of them. "Baked" is important because what the vendor does is bake a stripped-down version of…
I created a very simple SpringBoot app (pretty much a CRUD) and added JWT auth for users. The requests are all tested with postman and are working fine and interacting with the db without in cloud without any issues. My…
I have a web app that communicates with an auth server that stores the access & refresh token in an httpOnly cookie when the user logs in, now building an app so what is the best practice for storing those…
Getting the following error in function app on azure portal: The username or password incorrect: C:hostLogFilesApplicationFunctionHost We had created a function app which was on consumption plan, but we switched it to dedicated host - P3V2 in order to use…
This function is viewable in the browser. I'm worried someone could somehow access the folder and manipulate the db. Can I keep this open in the frontend or do I need to secure it in the backend? function fetchTotalLessons() {…
Because I am not allowed to enable Microsoft Defender for SQL from Azure Portal, I am tring to find a Powershell or AzureCLI command to enable it from CloudShell. The final step is to use that command in a pipeline.…
Assuming: A 3rd party provides a Dockerfile that I do not review I build the Docker image (docker build or similar) on my infrastructure the build has a time limit (e.g. max 5 minutes) Is this insecure for my infrastructure/machine?…
I've seen a bunch of news about this bug, does it affect applications that do not use the iconv() function?