The Curious Engineer

All blogs / Security

jub0bs.com

jub0bs.com

Recent content on jub0bs.com

SecurityGoWeb development

’05’10’15’20’25
Posts
30 from 1 Jan 2001 to 28 May 2026
Posting
monthly (7 in the last year)
Kind
personal blog
Feed
https://jub0bs.com/index.xml

2026 6

  1. Practical introduction to hacking and securing Web applications
  2. Generics and iterators in Go
  3. Concurrent programming in Go
  4. Introduction to Web security
  5. Introduction to Go
  6. Open source

2025 5

  1. Pure vs. impure iterators in Go
  2. Challenge: make this Go function inlinable and free of bounds checks
  3. Why concrete error types are superior to sentinel errors
  4. The cost of Go's panic and recover
  5. Programmatic handling of CORS-configuration errors with jub0bs/cors

2024 2

  1. Reconfigurable CORS middleware with jub0bs/cors
  2. jub0bs/cors: a better CORS middleware library for Go

2023 2

  1. A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF...
  2. Fearless CORS: a design philosophy for CORS middleware libraries (and a Go implementation)

2022 3

  1. Existence oracle for Secure cookies on insecure Web origins
  2. Scraping the bottom of the CORS barrel (part 1)
  3. CVE-2022-21703: cross-origin request forgery against Grafana

2021 3

  1. Abusing Slack's file-sharing functionality to de-anonymise fellow workspace members
  2. Subdomain takeover: ignore this vulnerability at your peril
  3. The great SameSite confusion

2020 5

  1. Protecting your apps from link-based vulnerabilities: reverse tabnabbing, broken-link hijacking, and open redirects
  2. A glimpse at parametric polymorphism in Go: designing a generic bidirectional map
  3. Leveraging an SSRF to leak a secret API key
  4. Chaining an IDOR with a business-logic error to achieve critical impact
  5. Plugging Git leaks: preventing and fixing information exposure in repositories

2019 1

  1. Summary of dotGo 2019

2018 2

  1. Access control in Go: a primer for Java developers
  2. Defer: sweet, but no syntactic sugar

2001 1

  1. :: jub0bs.com