Dev.to Security

🔨 XSS Fixed in 47 Seconds? Using VS Code Codex as a Veteran Inspector from Another Department

Introduction Hello from Japan! 🇯🇵 This article was originally published in Japanese on Qiita and…

Qualcomm IPQ5424 WiFi 7 Router Board | Helping ISPs Build Faster Networks and Stronger Businesses

Behind every successful ISP business, there is a reliable network foundation. Customers don't remem…

Fetch Metadata: A Practical Cross-Site Request Policy for Node.js

Most web security controls answer a narrow question. CORS decides whether browser JavaScript may rea…

Stored but unbound: custom XML is a document review surface

Stored but unbound: custom XML is a document review surface A document-review benchmark should not…

Unbound custom XML is still a handoff boundary

Unbound custom XML is still a handoff boundary A Word document can carry a conventional custom-XML…

Giving AI agents network access without getting owned

Cross-post. Original: stellarbytecapital.com/blog/ai-agent-network-egress-control Most useful AI a…

CVE-2026-69246: CVE-2026-69246: Host Validation Bypass in Guzzle HTTP Client Leading to SSRF

CVE-2026-69246: Host Validation Bypass in Guzzle HTTP Client Leading to SSRF Vulnerability ID: CV…

A slow database plus eager agent retries is an outage multiplier

A slow database rarely fails alone. Queries take longer. Connection pools fill. Agent requests hit …

Claude Code 2.1.221 Credential File Masking Checklist

Claude Code 2.1.221: mask credential files before sandboxed commands read them Quick answ…

A future-save privacy request deserves review

A future-save privacy request deserves review A direct Word Settings leaf can change while every p…

A future-save privacy request is a review boundary

A future-save privacy request is a review boundary A Word document can store a request that a capa…

A stored template-style update request deserves review

A stored template-style update request deserves review A WordprocessingML package can change a sto…