Reviewing a contact form like an attacker
Header injection, rate limits and what a honeypot really buys you.
Architecture reviews, audits and honest scorecards. 15 posts, newest first.
Posts here
15
Updated
Nov 05
Avg read
3m
Topics
32
Page 2 of 2
Header injection, rate limits and what a honeypot really buys you.
A short list that catches most of what reviewers would catch.
We audited our own process and kept about half of it.
What turned up when we searched old repositories for keys.
What an outside reviewer sees in the first ten minutes.
A short routine for the day you inherit someone else's site.