Using debugging tools is an excellent way to understand what is happening in your application. A debugger can help you quickly pinpoint the cause of a bug, and can also give you a more complete… (more…)

ProbeTheProto framework helps identify and alert websites vulnerable to a flaw that allows malicious actors to 'pollute' important web code... (more…)

Prototype Pollution, as the name suggests, is about polluting the prototype of a base object which can sometimes lead to arbitrary code… (more…)

I was doing code review for a coworker yesterday, and it soon became obvious that he used a linter and that the linter gave him a bright idea: use strict comparisons. Using strict comparisons is a great rule to follow. === instead of ==, !== instead of !=... (more…)

eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware. (more…)