✕ Clear all filters
3 articles
▶ Videos →

📰 Dev.to · Oopssec Store

3 articles · Updated every 3 hours · View all reads

All Articles 181,246Blog Posts 165,912Tech Tutorials 48,499Research Papers 35,698News 22,590 ⚡ AI Lessons
Racing a Next.js API route: coupon abuse with Prisma and SQLite
Dev.to · Oopssec Store 🔧 Backend Engineering ⚡ AI Lesson 3mo ago
Racing a Next.js API route: coupon abuse with Prisma and SQLite
OopsSec Store validates a coupon and increments its counter in two separate database calls. Send...
View lesson → + Playlist
Why sameSite: "lax" doesn't save your Next.js admin routes from CSRF
Dev.to · Oopssec Store 🔧 Backend Engineering ⚡ AI Lesson 4mo ago
Why sameSite: "lax" doesn't save your Next.js admin routes from CSRF
The admin order update endpoint authenticates via cookie and validates nothing else, allowing any...
View lesson → + Playlist
The ORM Didn't Save You: SQL Injection in a Prisma Codebase
Dev.to · Oopssec Store 🔧 Backend Engineering ⚡ AI Lesson 4mo ago
The ORM Didn't Save You: SQL Injection in a Prisma Codebase
This writeup walks through a SQL injection in the product search feature of the oss-oopssec-store, an...
View lesson → + Playlist