hello everyone I want to know if the fact that the CSP header not set for json response can be a source of problem let me explain more : I have a web app, that will send as a response html page with js (let's say csp is set ) the js will make a call to an api so in this api response do we need csp if yes what is the need for it ? there is any xss in javascript ? ​ I've just done a owasp zap scan and I found the header not set so I'm wondering is it a problem ​ https://preview.redd.it/54lirlbv682a1.png?width=503&format=png&auto=webp&s=c47ac31ebb02bbe500ca2c85b69e90340d8309cf sorry if it's a stupid question submitted by /u/firend_of_laki (https://www.reddit.com/user/firend_of_laki)
[link] (https://www.reddit.com/r/Pentesting/comments/z4yd94/do_we_need_to_set_a_content_security_policy_on_a/) [comments] (https://www.reddit.com/r/Pentesting/comments/z4yd94/do_we_need_to_set_a_content_security_policy_on_a/)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Mirai Botnet Returns, But Don’t Panic

https://cdn-images-1.medium.com/max/600/0*QJoCBykh9x6c9uaX.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Is Blockchain Safe? Detailed Analysis!

https://cdn-images-1.medium.com/max/602/1*TefKoIl_Nob4A6xuUlvUEw.jpeg
When it comes to technology, no topic gets as much buzz as blockchain. You might have heard your friends talking about it or seen a news…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
SQL dump keywords

What are some good keywords to search for on an sql dump that are note the basics like password and username?

submitted by /u/SgtMorningWood009
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How I hacked into a government e-learning website

DATE: 07/11/2022Continue reading on Medium »
Read more...

How I hacked into a government e-learning website
https://iamgk808.medium.com/how-i-hacked-into-a-government-e-learning-website-ce8da8fb4ccc?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

DATE: 07/11/2022Continue reading on Medium » (https://iamgk808.medium.com/how-i-hacked-into-a-government-e-learning-website-ce8da8fb4ccc?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking Dutch Government-Broken Authentication To Full Website Takeover (P1)
https://systemweakness.com/hacking-dutch-government-broken-authentication-to-full-website-takeover-p1-9af477604d54?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey guys ,Continue reading on System Weakness » (https://systemweakness.com/hacking-dutch-government-broken-authentication-to-full-website-takeover-p1-9af477604d54?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I hacked into a government e-learning website

https://cdn-images-1.medium.com/max/885/1*gwQ3BcqwjiREjgEeMlUx2g.png
DATE: 07/11/2022

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Dutch Government-Broken Authentication To Full Website Takeover (P1)

https://cdn-images-1.medium.com/max/666/0*1EEPt3hX6AWothFI
Hey guys ,

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OWASP Amaas — In Depth Network Mapping And Asset Discovery

https://cdn-images-1.medium.com/max/602/0*8LhIi2o1mkB0VEAY.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Exploiting Insecure Elasticsearch Cluster

https://cdn-images-1.medium.com/max/1072/1*KPEvwcH9jgqF6HkCveFY-Q.jpeg
🙋‍♂️Introduction

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video