Continous sharing knowledge

A blog about learning, career and software development.

All posts

X-Frame-Options: How to prevent drag-and-drop style clickjacking attacks

Apr 11, 2024

Clickjacking is a security threat where hackers trick users into clicking something different than they think they are. To protect your site, use the X-Frame-Options HTTP header. Here’s how; If your server sends out sensitive information, use DENY to prevent leaks. This setup helps pass security checks and certifications too. Simple adjustments in your server settings or web application configuration can make a big difference in protecting against clickjacking.

ClickjackingX-Frame-OptionsWeb SecurityCyber ThreatsHTTP Headers

Coupling and Cohesion: The key to high-quality software

May 11, 2023

Coupling and cohesion are important concepts in software development. Low coupling and high cohesion are desirable characteristics that result in more maintainable and flexible systems. On the other hand, high coupling and low cohesion can lead to rigidity, fragility, viscosity, and immobility, which can make software development more difficult and less efficient.

Design Principlescouplingcohesionsoftware project

Customizing the terminal the way I like it: Terminal on MacOS with Oh My Zsh, Powerlevel10k, iTerm2, Dracula, Plugins and more

Jan 26, 2022

I'm using a new machine with just my profiles configured and almost no customization. Because of this, in this text I will explain how I like to customize my development environment, I advance that I like to keep the terminal useful and light.

terminaldraculaoh my zshiterm2

Cloud Computing: File Upload with Node.JS, Azure Storage and MongoDB Atlas

Nov 08, 2020

This week I'm migrating my focus from learning Storage and Database tools, from Microsoft Azure Storage and MongoDB Atlas to Amazon S3, I'm still starting in cloud infrastructure.

javascriptcloud computingazure storagemongo db atlasfile uploadnode js

Cross-site scripting(XSS): The vulnerability created by your code when injecting text into the DOM

Sep 29, 2020

Recently in a forum I put on the agenda methods that involved the manipulation of the DOM (Document Object Model), because I had reflections around a detail, which is about the most common vulnerability on the web.

javascriptfrontendcross-site-scriptingsecurity