Securing Modern APIs: Why BOLA and Mass Assignment Slip Past the OWASP Top 10
If you only take one thing from this post, take this: scope every object lookup to the authenticated owner, and never l…
#Authorization
3 posts
OWASP API Security Top 10: A Practical Guide for IT Professionals
Introduction In today's interconnected digital landscape, Application Programming Interfaces (APIs) have become the bac…
API Security 101: DO's and DON'Ts You Must Know
Introduction As a Security Researcher, I've seen firsthand how critical API security has become in the modern digital l…