Application Security
ASVS 5.0 V14.3.2: Set Anti Caching Headers on Sensitive Pages
ASVS 5.0 V14.3.2 (Level 2): send Cache-Control no-store so browsers never keep sensitive responses. Middleware examples and a header check.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V14.3.1: Clear Client Data When a Session Ends
ASVS 5.0 V14.3.1 (Level 1): wipe authenticated data from the browser on logout, with Clear-Site-Data plus a client side fallback. Code and tests.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.8: Strip Metadata From User Uploads
ASVS 5.0 V14.2.8 (Level 3): remove sensitive metadata such as GPS and author fields from uploaded files unless the user agreed to keep it.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.7: Delete Sensitive Data on a Schedule
ASVS 5.0 V14.2.7 (Level 3): sensitive data needs a retention class and automatic deletion when it is no longer needed. A simple job and a test.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.6: Return Only the Sensitive Data Needed
ASVS 5.0 V14.2.6 (Level 3): responses should carry the minimum sensitive data, masked unless a user asks to see it. Serializer patterns and tests.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.5: Prevent Web Cache Deception
ASVS 5.0 V14.2.5 (Level 3): cache only the right content types, never dynamic private pages, and return 404 for missing files. Fixes and tests.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V14.2.4: Implement the Documented Data Protections
ASVS 5.0 V14.2.4 (Level 2): the controls you wrote down for each data protection level must exist in the running system. How to verify them.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.3: Keep Sensitive Data From Trackers
ASVS 5.0 V14.2.3 (Level 2): defined sensitive data must not flow to untrusted parties such as user trackers. How to find leaks and block them.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V14.2.2: Keep Sensitive Data Out of Shared Caches
ASVS 5.0 V14.2.2 (Level 2): stop load balancers and app caches from storing sensitive responses, or purge them after use. Configs and tests.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.