CSP

• Scraping the bottom of the CORS barrel (part 1) Aug 4

• Subdomain takeover: ignore this vulnerability at your peril Feb 12