Sanitizer Probe (should render safely)
A deliberately hostile post body used to confirm the render-time sanitizer holds.
Tag
#security
3 posts tagged "security".
Rate Limiting with a Token Bucket
A token bucket gives you smooth rate limits with burst tolerance in about a dozen lines. Here is the whole thing.
Securing Our API with Short-Lived JWTs
Long-lived tokens are a liability. We moved to 10-minute access tokens with rotating refresh tokens — here is the tradeoff.