Blog

What Is a WebDAV Server? How It Works, Use Cases, and Security Risks A WebDAV server lets users access and manage files over HTTP or HTTPS. It supports remote workflows such as document editing, collaboration, and legacy publishing. Now, WebDAV isn’t automatically unsafe. It becomes a risk when exposed methods, weak authentication, broad permissions, or …

Iframe XSS Explained: Trust Boundaries, Messages, and Embedded Content Iframe XSS isn’t one single bug class. It can refer to XSS inside framed content, unsafe srcdoc, user-controlled iframe sources, weak postMessage handling, over-trusted widgets, or parent pages that trust child frames too much. The fix starts with trust boundaries: control iframe sources, sandbox untrusted content, …