Security Audit

Có rất nhiều lổ hổng bảo mật căn bản cần lưu ý trong quá trình lập trình:

• Cross-site request Forged (CSRF)

• Host Header Injection

• Clickjacking

• Too many requests (code 429)

• Vulnerable JavaScript dependency

Tham khảo

• https://viettechie.com/csrf-la-gi-tim-hieu-ve-csrf-va-cach-phong-chong-tan-cong-hieu-qua/?swcfpc=1

• https://viettechie.com/lam-sao-de-phong-tranh-lo-hong-host-header-injection/?swcfpc=1

• https://viettechie.com/lo-hong-clickjacking/?swcfpc=1

• https://viettechie.com/nguyen-nhan-va-5-cach-sua-loi-429-too-many-requests/?swcfpc=1

• https://viettechie.com/discover-25-medicinal-trees-that-are-great-to-harvest-for-homemade-medicine/?swcfpc=1

• https://viettechie.com/vulnerable-javascript-dependency/?swcfpc=1