Tag
browser-security
- Jun 24, 2025 Cookie Scope, Attributes, and Transport Rules The exact matching rules that decide whether a browser attaches a session cookie to a request, and how Domain, Path, Secure, HttpOnly, and SameSite narrow that decision. backend systems
- Feb 27, 2025 OAuth 2.0 and the Implicit Grant: Removing a Token from the Browser Why the implicit grant existed, what the browser redirect model made impossible to secure, and how the password and hybrid grants traded a front-channel leak for a different attack surface rather than eliminating it. computing history
- Jul 12, 2024 How the Same-Origin Policy Computes and Compares Origins The origin triple of scheme, host, and port, the opaque origins produced by sandboxing and data URLs, and which browser capabilities the policy actually gates. web platform