[Learning Resources] API Security

 

https://github.com/NeilMadden/apisecurityinaction

https://cheatsheetseries.owasp.org/

https://oauth.net/

https://observatory.mozilla.org/

https://portswigger.net/research/json-hijacking-for-the-modern-web

https://datatracker.ietf.org/doc/html/rfc6750

OAuth 2.0 for native apps: https://datatracker.ietf.org/doc/html/rfc8252

 

API Security in Action

 

 

XSS

- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

- https://web.dev/trusted-types/

 

 

 

https://srl.cs.jhu.edu/pubs/SRL2003-02.pdf

https://research.google/pubs/pub41892/