Sanitizer Probe (should render safely)
A deliberately hostile post body used to confirm the render-time sanitizer holds.
Author
Lena Novak
https://lenanovak.securitySecurity Engineer. Threat models for breakfast. Believes least privilege is a love language.
3 posts by Lena Novak.
Rate Limiting with a Token Bucket
A token bucket gives you smooth rate limits with burst tolerance in about a dozen lines. Here is the whole thing.
Securing Our API with Short-Lived JWTs
Long-lived tokens are a liability. We moved to 10-minute access tokens with rotating refresh tokens — here is the tradeoff.