#web security headers
53 related articles
·5 min
OSINT Tools for Automated Discovery of Exposed Files on Domains: Principles, Applications, and Compliance Boundaries
Deep dive into how OSINT automation tools discover exposed files on domains, covering dictionary probing principles, attack surface management, bug bounty techniques, and compliance boundaries.
Read more →
·7 min
Learning Python Web Scraping from Scratch: How It Works, the Full Workflow, and Legal Boundaries
A must-read intro to Python web scraping: from HTTP requests and HTML parsing to data storage, systematically explaining how crawlers work and their full workflow, while clarifying legal boundaries like the robots protocol and privacy protection.
Read more →
·8 min
Python Web Scraping for Beginners: How It Works, Core Workflow, and Legal Red Lines Explained
A plain-language guide to how Python web scrapers work: from HTTP requests and responses, HTML tag parsing, to the complete three-step data scraping workflow, with a focus on the three legal red lines and compliance advice.
Read more →
·3 min
WASM for Data Processing: Can Browsers Really Handle Big Data?
Can WASM really handle big data? This deep dive covers DuckDB-WASM's in-browser SQL capabilities, edge data processing architectures, and where WebAssembly fits in modern data engineering.
Read more →
·4 min
Ternlight: A 7MB Browser-Side Embedding Model for Server-Free Semantic Search
Ternlight is a 7MB WebAssembly-based browser-side text embedding model requiring no server or GPU. Explore its tech, use cases, and tradeoffs for private, offline semantic search.
Read more →
·6 min
Semi-AI Mode: A Practical Guide to Implementing API Automation Testing
Can't make pure AI work? This guide explores the Semi-AI approach to API automation testing, covering key challenges, enterprise framework design, and how AI and frameworks work together for maximum impact.
Read more →
·3 min
Fix Codex Reconnecting Loop: Switch Network Protocol via Environment Variables
Codex's Reconnecting 5/5 loop is caused by WebSocket being the default protocol. Learn how to set .env environment variables to switch Codex to HTTP/HTTPS and eliminate the wait.
Read more →
·3 min
Building an Automated Penetration Testing System with Claude: A Deep Dive into Memory, Skills, and Agent Architecture
A security researcher demonstrates how to customize Claude into an automated penetration testing system with memory, skills, and a knowledge base — successfully compromising CTF targets and finding real Bug Bounty vulnerabilities.
Read more →
·3 min
Building and Deploying a Personal Website from Scratch with Claude Code: A Complete Walkthrough
A step-by-step guide to building a personal brand website with Claude Code AI and deploying it on a ¥99 Alibaba Cloud server — covering Git, Nginx, and automation scripts.
Read more →
·7 min
Cloudflare Natively Supports the x402 Protocol: How Micropayments Are Reshaping Web Monetization
Cloudflare announces native x402 HTTP payment protocol support, enabling developers to charge stablecoin micropayments for API calls without accounts or keys. Deep dive into how x402 works and its impact on AI Agent economics.
Read more →
·7 min
AI Agent Practical Guide: The Complete Path from Building to Production Deployment
A deep dive into AI Agent architecture and engineering practices, covering tool design, ReAct execution patterns, Vercel deployment, and production considerations to bridge the prototype-to-production gap.
Read more →
·6 min
Is Claude Fable 5 Real? Exposing the AI Reseller Service Scam
Anthropic never released a Claude Fable 5 model. This article analyzes fake AI promotions, exposes wrapper service scam tactics, and provides tips for verifying AI claims.
Read more →
·8 min
Free Top-Tier AI Models on Aggregator Platforms? A Sober Analysis and Pitfall Avoidance Guide
In-depth analysis of AI aggregator platforms claiming free access to GPT, DeepSeek, and Gemini. Reveals hidden data risks, business logic, and recommends legitimate alternatives like OpenRouter and Poe.
Read more →
·3 min
Spec Website: An Open-Source Website Specification Checklist
Spec Website is an open-source website specification checklist covering page structure, accessibility, security, SEO, privacy, and AI agent readability to help developers verify standards compliance before launch.
Read more →
·4 min
JavaScript Fundamentals: A Complete Guide to Variables, DOM Manipulation, Event Handling, and API Calls
A systematic guide to JavaScript fundamentals covering variables, data types, functions, DOM manipulation, event handling, and Fetch API calls to help beginners transition from static pages to dynamic interactive development.
Read more →
·4 min
Complete Guide to Installing Claude Code CLI in China: Four Simple Steps
Step-by-step guide to installing Claude Code CLI in China using Node.js, Git, CC Switch, and an API relay service to bypass Anthropic's access restrictions.
Read more →
·3 min
5 Steps to Connect Codex with DeepSeek — No GPT Account Required
Step-by-step tutorial: Connect Codex to DeepSeek API via CC Switch in 5 steps. No GPT account needed — use AI coding features like code completion and Skill plugins at lower cost.
Read more →
·3 min
Complete Guide to Alibaba Cloud Website Architecture: The Full Request Path from DNS to Auto Scaling
A systematic guide to Alibaba Cloud website architecture covering DNS, CDN, WAF, CLB/ALB, ECS, Redis, NAS/OSS, and auto scaling along the full user request path.
Read more →
·3 min
Claude Sonnet 4 Invents Its Own Browser Automation: The Wild Debugging Journey of a CSS Bug
Simon Willison shares how Claude Sonnet 4 (Fable) autonomously invented PyObjC screenshots, built a CORS server, and penetrated Shadow DOM to debug a CSS bug — revealing both tool-making power and security risks.
Read more →
·3 min
Codex MCP Getting Started Guide: Configuration Methods and Practical Applications Explained
A detailed guide to Codex MCP (Model Context Protocol): core concepts, two server types, configuration methods, and practical applications to help developers get started quickly.
Read more →