Posts

Showing posts with the label SameSite Cookie

SameSite cookies working explained

-
Image
Secure your site by learning how to explicitly mark your cross-site cookies. Cookies are one of the methods available for adding persistent state to web sites. Over the years their capabilities have grown and evolved, but left the platform with some problematic legacy issues. To address this, browsers (including Chrome, Firefox, and Edge) are changing their behavior to enforce more privacy-preserving defaults. Each cookie is a  key=value  pair along with a number of attributes that control when and where that cookie is used. You've probably already used these attributes to set things like expiration dates or indicating the cookie should only be sent over HTTPS. Servers set cookies by sending the aptly-named  Set-Cookie  header in their response. For all the detail you can dive into  RFC6265bis , but for now here's a quick refresher. Say you have a blog where you want to display a "What's new" promo to your users. Users can dismiss the promo and then they won't...
Post a Comment
Read more

Popular posts from this blog

How to Secure Session Management in Node

-
In a web application, data is transferred from a browser to a server over HTTP. In modern applications, we use the HTTPS protocol, which is HTTP over TLS/SSL (secure connection), to transfer data securely. Looking at common use cases, we often encounter situations where we need to retain user state and information. However, HTTP is a stateless protocol. Sessions are used to store user information between HTTP requests. We can use sessions to store users' settings like when not authenticated. Post authentication sessions are used to identify authenticated users. Sessions fulfill an important role between user authentication and authorization. Exploring Sessions Traditionally, sessions are identifiers sent from the server and stored on the client-side. On the next request, the client sends the session token to the server. Using the identifier, the server can associate a request with a user. Session identifiers can be stored in cookies, localStorage, and sessionStorage. Session identi...
Read more

Angular 9 - User Registration and Login Example & Tutorial

-
Image
In this tutorial we'll go through an example of how to build a simple user registration, login and user management (CRUD) application with Angular 9. The project is available on GitHub at  https://github.com/cornflourblue/angular-9-registration-login-example . The Angular CLI was used to generate the base project structure with the  ng new <project name>  command, the CLI is also used to build and serve the application. For more info about the Angular CLI see  https://angular.io/cli . Styling of the example app is all done with Bootstrap 4.4 CSS, for more info about Bootstrap see  https://getbootstrap.com/docs/4.4/getting-started/introduction/ . Here it is in action:   (See on StackBlitz at  https://stackblitz.com/edit/angular-9-registration-login-example ) Running the Angular 9 Login Tutorial Example Locally Install NodeJS and NPM from  https://nodejs.org . Download or clone the Angular project source code from  https:...
Read more

How to download a file using command prompt (cmd) Windows?

-
Image
If you’re like most Internet users, you download various types of files now and then. You either download these files with your web browser or some download manager software. Have you ever considered downloading files using the command prompt i.e. CMD? If not, we recommend you to try it. It’s quite interesting apart from being very useful as well. In this article, we’ll show you how to download a file using command prompt aka CMD. How to download a file using command prompt?   There are several useful commands for the Command Prompt and one of them is  bitsadmin . Though bitsadmin has several uses, here we shall limit this article to its role in downloading files only. If you want to read the details about bitsadmin syntax, continue reading this section. Otherwise, you can scroll down to the next section –  Downloading a file .   The syntax of bitsadmin is : BITSADMIN [/RAWRETURN] [/WRAP | /NOWRAP] command   As you know, the parts of the syntax inside ...
Read more