Robert Larsen​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌‌‍‌‍‌‍‌‍‌‍‌‌‌‍‌‌​​​​​‍​‍‌‌‍​​‍‌​​‍‌‍‌‌‌‍​‌​‍​​‍‌​‌​​‍‌‌‍‌​​‌‍​‍‌​‍​​​​‌‍​‌​​​​‍‌‌‍‌​​​‌‌‍‌‍‌‍‌​​‌‌‌‍‌‍​​‍​‌‍​‍​‌‍​​​​​​‍​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌‍​‌‌‌‌‌‌​‌‍‍​‌‍‌​‍​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌‍‌‌‌‌‍​‌‍​‌​‍‌‍​‌‌‍‌‌‍‌‌​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌‌‍‌‍‌‍‌‍‌‍‌‌‌‍‌‌​​​​​‍​‍‌‌‍​​‍‌​​‍‌‍‌‌‌‍​‌​‍​​‍‌​‌​​‍‌‌‍‌​​‌‍​‍‌​‍​​​​‌‍​‌​​​​‍‌‌‍‌​​​‌‌‍‌‍‌‍‌​​‌‌‌‍‌‍​​‍​‌‍​‍​‌‍​​​​​​‍​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌‍​‌‌‌‌‌‌​‌‍‍​‌‍‌​‍​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌‍‌‌‌‌‍​‌‍​‌​‍‌‍​‌‌‍‌‌‍‌‌​‍​‍‌‌

In the first article of this year's calendar, we gave a few tips to help making your applications a bit more secure. Now, as the countdown has come to an end, and we are ready to start the Christmas holidays, we want to give you a few more.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌​‍‌​‌‌​​‌​​​​‌‍​​​‌‍​‍​‍‌​‍‌‌‍‌​‌‍​‌‌‍‌​​‍​​‍‌​‌​‌‍‌​​​‌‍‌‌​‍‌​‍​​​​​​​​‌‍​‍‌​​‍​‌‌‍‌​​​​‍​​​​‌‍‌‌​‌​‌‍​‌​​​​‌‍‌‍‌‌​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌​‍‌​‌‌​​‌​​​​‌‍​​​‌‍​‍​‍‌​‍‌‌‍‌​‌‍​‌‌‍‌​​‍​​‍‌​‌​‌‍‌​​​‌‍‌‌​‍‌​‍​​​​​​​​‌‍​‍‌​​‍​‌‌‍‌​​​​‍​​​​‌‍‌‌​‌​‌‍​‌​​​​‌‍‌‍‌‌​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

Looking for some entertainment while you decorate the Christmas tree or order the latest Christmas gifts? Today we share some of our favorite podcasts.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌‌‍​‌​​​​​​‌‌​​​​‍‌‌‍​​​‍​‍‌​​‍​​‌‍​‌‌‍‌‍​‍‌​‌​​‌​​​‍​‍​​‍‌​‍​​‌‍‌‍​‌‍​‍​‍‌​‍​​​​‌‍​‌​‌‍‌‍​‍​​‌‌‍​​​‍​​‌​‌​​​​‍​​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌‌‍​‌​​​​​​‌‌​​​​‍‌‌‍​​​‍​‍‌​​‍​​‌‍​‌‌‍‌‍​‍‌​‌​​‌​​​‍​‍​​‍‌​‍​​‌‍‌‍​‌‍​‍​‍‌​‍​​​​‌‍​‌​‌‍‌‍​‍​​‌‌‍​​​‍​​‌​‌​​​​‍​​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

Looking for some inspiration? Something to learn? Here we give you a list of interesting people we follow. These people are worth listening to.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌‌‍‌‍‌‍​‌‍‌‌​‍‌​‌‌​‍​​​​‌‍​‌​‍‌​​​‌‍‌‍‌‍‌‍​‌​​‍‌​‌​​‌‍‌‍​‌‌‍​‌​‍‌​‍​​‍‌​‍‌‌‍​​‍‌‌‍‌​​​‌​​‌​‍‌​‌‍‌‍‌‍‌‍​​‍‌‌‍​​‍​​​​‌‍‌‍​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌‌‍‌‍‌‍​‌‍‌‌​‍‌​‌‌​‍​​​​‌‍​‌​‍‌​​​‌‍‌‍‌‍‌‍​‌​​‍‌​‌​​‌‍‌‍​‌‌‍​‌​‍‌​‍​​‍‌​‍‌‌‍​​‍‌‌‍‌​​​‌​​‌​‍‌​‌‍‌‍‌‍‌‍​​‍‌‌‍​​‍​​​​‌‍‌‍​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

As developers, we usually use some sort of pipeline to build and deploy our code. Tools like Circle CI, Gitlab CI/CD and Github Actions are popular. Can your pipelines be a security vulnerability? Can you use your pipeline to create a more secure application?​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌​‌‍​​​‌‍​‌​​‍​​‌‍‌‍​‍​​‍​​‍‌​​​‍​‌‍​‍​​​‍‌​‌​‌‍​‍‌‍​‍​‌​​‍‌‌‍​‌​​‌‌‍​‌​‌‌​‍‌‌‍‌‌‌‍‌​​‌​‌‍​‌​‌‍‌‍​‌‍‌​‌‍‌‍​‌‍​‍​​‌‌‍‌​​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌​‌‍​​​‌‍​‌​​‍​​‌‍‌‍​‍​​‍​​‍‌​​​‍​‌‍​‍​​​‍‌​‌​‌‍​‍‌‍​‍​‌​​‍‌‌‍​‌​​‌‌‍​‌​‌‌​‍‌‌‍‌‌‌‍‌​​‌​‌‍​‌​‌‍‌‍​‌‍‌​‌‍‌‍​‌‍​‍​​‌‌‍‌​​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

We are really excited to present this year's calendar, and hope that you will enjoy reading it as much as we enjoyed writing it. Security as a topic is hotter than ever. While we count down the days until Christmas Eve you will be given new, original security content each day. Enjoy the countdown together with us!​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌​‌‌‌‍‌​‌‍​‍​‌‍‌‍​‌‍​‍​‌‌​‍‌​‍‌​‍​​​‍‌‍​‌‌‍​‌​‍‌​‌​​‌​‌‍​‌‌‍‌‌​‍‌‌‍​‍‌‍​‌‍‌​​​​‍‌​​‌‌‍​‌‍‌‌​​‍​‌​‌‍​​​‌​‌‍​‍‌​​‌​​​​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌​‌‌‌‍‌​‌‍​‍​‌‍‌‍​‌‍​‍​‌‌​‍‌​‍‌​‍​​​‍‌‍​‌‌‍​‌​‍‌​‌​​‌​‌‍​‌‌‍‌‌​‍‌‌‍​‍‌‍​‌‍‌​​​​‍‌​​‌‌‍​‌‍‌‌​​‍​‌​‌‍​​​‌​‌‍​‍‌​​‌​​​​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

In a phishing attack the attacker will try to steal user data, e.g. login credentials. Reverse tabnabbing is a phishing method, and here we will try to explain what it is and how it can be prevented.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌​​‌‌‍​‍‌‍‌‍​‌‌​‌‍​‍‌​‌​​​​​‍‌​​‍​​​​​‌‍‌‌​‍‌​‌​​‌​‌‍​‍​‌‌​‍‌‌‍​‍​‍‌​‌‍‌‍​‍​‍‌‌‍​​‌‍​​​​‌‍​‌‌‍​‌​​​​‌‍‌‍‌‍​​‍​‌‌‌‍‌‌​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌​​‌‌‍​‍‌‍‌‍​‌‌​‌‍​‍‌​‌​​​​​‍‌​​‍​​​​​‌‍‌‌​‍‌​‌​​‌​‌‍​‍​‌‌​‍‌‌‍​‍​‍‌​‌‍‌‍​‍​‍‌‌‍​​‌‍​​​​‌‍​‌‌‍​‌​​​​‌‍‌‍‌‍​​‍​‌‌‌‍‌‌​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

The Open Web Application Security Project (OWASP) maintain and release the well-known OWASP Top 10. It is a list of the most critical security risks in web-applications today. When developing mobile applications, security is of no less importance. However, the risks and vulnerabilities may be a little different. Therefore, OWASP developed another top 10 list, OWASP Mobile Top 10, which lists the 10 most critical security risks and vulnerabilities for applications running on a mobile platform. In 2018, NowSecure claimed that 85% of mobile applications available on the App Store or Google Play violated at lest one of the risks on the list. In this article, we will give you a brief summary and introduction to which risks we are talking about.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌‌‍​‌‌‍‌​‌‍‌‌​​​​‌‍‌‍​‌​‌​​‍‌‌‍‌‌​​​‌‍​‌​​‌​‍‌​‌​‌‍​‍‌‍​‍‌‍​‌​‍‌​‍​‌‍‌‌​‌‍​‌‍​‍‌​‌​​​​‌‍‌‍‌‍‌‌​‌‍‌‍​‌‍​‍‌‍‌​​‍​​‍‌‌‍​‍‌‍‌​​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌‌‍​‌‌‍‌​‌‍‌‌​​​​‌‍‌‍​‌​‌​​‍‌‌‍‌‌​​​‌‍​‌​​‌​‍‌​‌​‌‍​‍‌‍​‍‌‍​‌​‍‌​‍​‌‍‌‌​‌‍​‌‍​‍‌​‌​​​​‌‍‌‍‌‍‌‌​‌‍‌‍​‌‍​‍‌‍‌​​‍​​‍‌‌‍​‍‌‍‌​​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌

Cross Origin Resource Sharing (CORS) is an important concept in modern webapplication security. We will try to explain what it is.​​​​‌‍​‍​‍‌‍‌​‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍​‍​‍​‍‍​‍​‍‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‍‍‌‌‍​‍​‍​‍​​‍​‍‌‍‍​‌​‍‌‍‌‌‌‍‌‍​‍​‍​‍‍​‍​‍‌‍‍​‌‌​‌‌​‌​​‌​​‍‍​‍​‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‍‌‌‍‍‌‌​‌‍‌‌‌‍‍‌‌​​‍‌‍‌‌‌‍‌​‌‍‍‌‌‌​​‍‌‍‌‌‍‌‍‌​‌‍‌‌​‌‌​​‌​‍‌‍‌‌‌​‌‍‌‌‌‍‍‌‌​‌‍​‌‌‌​‌‍‍‌‌‍‌‍‍​‍‌‍‍‌‌‍‌​​‌​‌‌​‌‌‍‌‌‌‍​​​​‌‍‌‍​‍​​​‍​‍‌‌‍‌​‌‍‌​​​​‌‍​‌​‍‌​‌​‌‍‌‍​‍‌​​‌​‍‌‌‍​‍‌‍‌​​‍​‌‍​‍​‍‌​​‌‌‍​​​​‍‌​‌​‍‌​‌‌‍‌‍​‌​​​​‍‌‍‌‍​‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‌‍​‍‌‍​‌‌​‌‍‌‌‌‌‌‌‌​‍‌‍​​‌‌‍‍​‌‌​‌‌​‌​​‌​​‍‌‌​​‌​​‌​‍‌‌​​‍‌​‌‍​‍‌‌​​‍‌​‌‍‌‍​‍‌‍‌‌‌‍‍‌‍‍​‍‌‌‍​‍‌‍​‌‍‌‍‌‌‍‌​‍‌‌​‌‍​‌‌‍‍‌‍‍‌‌‌​‌‍‌​‍‍‌‌‍‌‍‌‌‌​‍‌‍​‌‍‌‌‌‍​​‍‍‌‍​‌‌​​‌​​​‍‌‍‌‍‍‌‌‍‌​​‌​‌‌​‌‌‍‌‌‌‍​​​​‌‍‌‍​‍​​​‍​‍‌‌‍‌​‌‍‌​​​​‌‍​‌​‍‌​‌​‌‍‌‍​‍‌​​‌​‍‌‌‍​‍‌‍‌​​‍​‌‍​‍​‍‌​​‌‌‍​​​​‍‌​‌​‍‌​‌‌‍‌‍​‌​​​​‍‌‍‌‍​‍‌‍‌‌​‌‍‌‌​​‌‍‌‌​‌‌​​‌‍‌​‌‌​​‍‌‍‌​​‌‍​‌‌‌​‌‍‍​​‌‌‍‌​‌‍‌‌‌​‌‍​‌​‍‌‍‍‌‌​​‌‌​‌‍‍‌‌‍‌‍‍​‍​‍‌‌