Csp Memes

Posts tagged with Csp

Git Hub's Http Header
Security Webdev Git Microsoft AWS
8 days ago 51.1M views 0 shares
Git Hub's Http Header
Oh sweet mercy, someone decided to grep GitHub's Content-Security-Policy header and unleashed the ENTIRE INTERNET onto their terminal. Look at this absolute UNIT of a security policy! We've got every single GitHub subdomain, Microsoft's Azure blob storage with what appears to be 111+ production result containers (productionresultssa1 through productionresultssa111), Visual Studio tunnels, and basically half of AWS's S3 buckets just casually hanging out in there. GitHub really said "you know what, let's just whitelist EVERYTHING we've ever touched" and created what is essentially the CVS receipt of HTTP headers. Security through exhaustive enumeration, baby! Nothing says "we take security seriously" quite like a CSP header that probably needs its own CDN to load faster. 💀

Vercel's Solution To Their Static Generation Feature Being Incompatible With Secure Webpages
Webdev Security Frontend React Cloud
1 year ago 443.6K views 0 shares
Vercel's Solution To Their Static Generation Feature Being Incompatible With Secure Webpages
Ah yes, the classic "we broke something essential so now you need our premium feature" strategy. Vercel basically saying "Hey, our static generation doesn't work with security? Have you tried... not using static generation and paying us instead?" 🤔 For the uninitiated: CSP (Content Security Policy) is a crucial security feature that helps prevent attacks like XSS. But apparently making it work with static generation was too much trouble, so the solution is "just use our dynamic rendering instead!" Which, coincidentally, costs more money. What a shocking coincidence! It's the tech equivalent of a mechanic breaking your brakes then suggesting you buy a parachute.