2 votes
Accepted

Does Firebase App Check provide CSRF protection?

Based on the available documentation, no, it probably does not. Specifically, there is no indication that the App Check token is tied to a specific user, only to a specific app; another user of the ...
CBHacking's user avatar
  • 46.4k
1 vote
Accepted

Risk of using scripting language on backend?

The main risk of scripting languages is that they usually have constructs to execute a string as code, i.e. things like eval. This can be used for injections attacks if this feature is used in the ...
Steffen Ullrich's user avatar
1 vote

Login/Registration: why is not telling the users they got their username wrong during login, if registration already hint username existence?

The way to mitigate that would be to not give away this information during the registration process, but when your registration form is only email + password, you can not really do that ? If you're ...
Gh0stFish's user avatar
  • 9,307

Only top scored, non community-wiki answers of a minimum length are eligible