From our Community

Blog


How to Increase Security Against XSS Attacks

Published on November 21, 2014

Last week I covered the general idea behind Cross-site Scripting (XSS), and this week I am going to get a little deeper into how you can prevent it happening to your web app or site. There are a number of tactics you can use to make your project a less attractive target, and even though it’s probably impossible to have a complex user app and be totally immune to XSS, you can at least be more difficult than the next guy. This gives you the added advantage of sending wannabe hackers towards easier pickings.

Read more…


Cross-site Scripting

Published on November 14, 2014

One of the good things about writing a weekly blog is the impetus it provides to keep studying different topics. This week Cross-site Scripting (XSS) is in the crosshairs, as it is of the most common security vulnerabilities in software (see chart below, sourced from the WHID. Essentially an attacker embeds a script on a page, which is then executed on the client-side rather than on the server-side. Typical client-side scripting languages are HTML and JavaScript, or even SVG.

Read more…



IBM is having another heart attack, HP is falling apart, and those crashing share prices are a dose of reality to those buy innovative companies and process them into a business unit shops. Now the bad ideas are getting shed and creative destruction continues in the marketplace. This darwinism is accelerated in software and technology because anybody with a computer can potentially wreck your business tomorrow morning. Your software becomes obsolete, your product antiquated, and your board members suddenly start a share buyback programme to support their stock options.

Read more…


The RhodeCode Story

Published on October 26, 2014

The RhodeCode infographic charts how we got to where we are today. From Marcin’s initial idea to a rapidly growing software development company creating the world’s best software development solutions.

Read more…



Twitter Feed