Comparing 3 Great Web Security Books

david@systemoverlord.com (David Tomaschik) — Fri, 10 Jul 2020 00:00:00 +0000

I thought about using a clickbait title like “Is this the best web security book?”, but I just couldn’t do that to you all. Instead, I want to compare and contrast 3 books, all of which I consider great books about web security. I won’t declare any single book “the best” because that’s too subjective. Best depends on where you’re coming from and what you’re trying to achieve.

The 3 books I’m taking a look at are:

Posting JSON with an HTML Form

david@systemoverlord.com (David Tomaschik) — Wed, 24 Aug 2016 00:00:00 +0000

A coworker and I were looking at an application today that, like so many other modern web applications, offers a RESTful API with JSON being used for serialization of requests/responses. She noted that the application didn’t include any sort of CSRF token and didn’t seem to use any of the headers (X-Requested-With, Referer, Origin, etc.) as a “poor man’s CSRF token”, but since it was posting JSON, was it really vulnerable to CSRF? Yes, yes, definitely yes!

Web Security on System Overlord

Comparing 3 Great Web Security Books

Posting JSON with an HTML Form