https://vvnblog.com/tags/web-security/Recent content in Web Security on Vivian's BlogHugo -- gohugo.iozh-twCopyright © 2026 Vivian All Rights Reserved.Fri, 19 Jul 2024 00:00:00 +0000https://vvnblog.com/posts/graphql-leak-info/Fri, 19 Jul 2024 00:00:00 +0000https://vvnblog.com/posts/graphql-leak-info/一個沒關掉的 Introspection Query，就讓我列舉出整個 GraphQL schema。從實戰案例看這個常見卻致命的設定疏失。https://vvnblog.com/posts/cookie/Thu, 23 May 2024 00:00:00 +0000https://vvnblog.com/posts/cookie/一個沒設好的 Cookie，足以讓攻擊者偽裝成你。認識 Secure、HttpOnly、SameSite 這三道防線，以及怎麼開啟它們。https://vvnblog.com/posts/jwt/Thu, 11 Apr 2024 00:00:00 +0000https://vvnblog.com/posts/jwt/一組用點號分隔的字串，如何撐起現代網站的登入驗證？拆解 JWT 的三段結構，以及用它時最容易踩的雷。