Links
- https://aszx87410.github.io/beyond-xss/en/
- https://mizu.re/
- https://matanber.com/
- https://zere.es/
- https://blog.babelo.xyz/
- https://ysamm.com/
- https://vitorfalcao.com/
- https://zhero-web-sec.github.io
- https://www.indusface.com/learning/phantom-domain-attacks/
- https://www.crowdsec.net/
- https://www.browserstack.com/guide/what-is-system-integration-testing
- https://sucuri.net/
- Introduction | XS-Leaks Wiki
- https://github.com/OWASP/www-project-automated-threats-to-web-applications
- https://owasp.org/www-project-application-security-verification-standard/
- https://github.com/OWASP/ASVS
- GitHub - infoslack/awesome-web-hacking: A list of web application security
- Goodbye Feature Policy and hello Permissions Policy!
- https://securityrat.github.io/
- https://projectdiscovery.io/blog/how-to-research-web-vulnerabilities
- https://security.googleblog.com/2025/10/https-by-default.html
- https://codebutler.com/2010/10/24/firesheep/
- https://www.crawlspider.com/content-security/
- https://disable-javascript.org/
- HTTP Observatory | MDN
- https://github.com/mdn/mdn-http-observatory/
- OWASP SAMM
- https://github.com/OWASP/www-project-secure-headers
- https://chromium.googlesource.com/chromium/src/+/lkgr/services/network/cross_origin_read_blocking_explainer.md
- https://www.chromium.org/Home/chromium-security/corb-for-developers/
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Cross-Origin-Opener-Policy
- https://andrewlock.net/understanding-security-headers-part-1-cross-origin-opener-policy-preventing-attacks-from-popups/
- https://docs.google.com/document/d/1zDlfvfTJ_9e8Jdc8ehuV4zMEu9ySMCiTGMS9y0GU92k/edit?tab=t.0
- https://http.dev/cross-origin-opener-policy
- https://web.dev/articles/why-coop-coep
- https://modheader.com/usecases/headers/cross-origin-opener-policy
- https://caniuse.com/?search=Cross-Origin-Opener-Policy
- https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage
- https://medium.com/somos-pragma/an-alternative-for-sending-data-to-another-place-or-to-localstorage-postmessage-dc7e72e7ea11
- https://www.sidechannel.blog/en/xssi-an-overview-of-the-vulnerability-in-2024/
- https://www.mbsd.jp/Whitepaper/xssi.pdf
- https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity
- https://www.w3.org/TR/sri-2/
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#cookie_prefixes
- https://docs.oracle.com/cd/E19146-01/821-1833/6nmpqok37/index.html
- https://scan.coverity.com
- https://mathiasbynens.be/