Being Safe and Secure with Cross-Origin Messaging

Explore onMessage and postMessage in browsers: Learn cross-origin JavaScript interactions, security issues, and flaw prevention.
Scary Web Services: Part 2

Although Snapchat’s breach appears to be due to some poor assumptions around an “internal” Snapchat API, it is not the type of traditional web service…
Scary Web Services: Part 1
I have several things I want to say about web services but why are web services scary to me in the role of a pen tester?