Security
LDAP Injection Explained With a Real Example
A walkthrough of a concrete LDAP injection example, why the filter syntax makes it dangerous, and how to detect and remediate it in real code.
Apr 17, 20256 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Deep Code Analysis: What It Is and How It Finds Bugs Shallow Scans Miss
Deep code analysis reads how data flows through your program instead of matching patterns line by line. Here is what that buys you over grep-style linting.
Apr 17, 20256 min read
Security
The Most Common Java Security Flaws and How to Fix Them
A practitioner's tour of the Java security flaws that actually break production systems — deserialization, injection, XXE, and the dependency risks that scanners miss.
Apr 17, 20257 min read
Security
How to Run JavaScript Code: Methods and Security Notes
A practical guide to how to run JavaScript code in the browser, with Node.js, and from the command line, plus the security traps that turn a convenient runner into a liability.
Apr 16, 20256 min read
Security
CVE-2023-20873: The Spring Boot Cloud Foundry Auth Bypass Explained
A clear breakdown of CVE-2023-20873, the Spring Boot security bypass on Cloud Foundry: affected versions, why wildcard matching caused it, and how to fix it.
Apr 15, 20255 min read
Security
Java URLEncode: How to Encode URLs Safely in Java
Java urlencode is usually URLEncoder.encode, but it is built for form bodies, not full URLs. Here is when to use it and when it introduces bugs.
Apr 15, 20255 min read
Security
Java URL Decode: Doing It Safely Without Opening Holes
Java URL decode looks trivial until you hit double-decoding and encoding mismatches. Here is how to decode URLs in Java correctly and where the security bugs hide.
Apr 15, 20256 min read
Security
Copyleft Meaning Explained: How Reciprocal Licenses Work
The meaning of copyleft, in plain terms: how reciprocal licenses keep software free, how strong and weak copyleft differ, and why it changes how you use open source dependencies.
Apr 15, 20256 min read
Security
CVE-2019-10768: The AngularJS Prototype Pollution Flaw Explained
CVE-2019-10768 is a prototype pollution vulnerability in AngularJS before 1.7.9, where the merge() function can be tricked into modifying Object.prototype. Here is what it does, who it affects, and how to remediate.
Apr 15, 20255 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.