--- title: Best Security posts — January 2024 | daily.dev description: The most upvoted Security posts from January 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/security/best-of/2024/01 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/security/best-of/2024/01 og:type: website og:site_name: daily.dev og:title: Best Security posts — January 2024 | daily.dev og:description: The most upvoted Security posts from January 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Security — January 2024 1. 1 [](https://daily.dev/posts/understanding-cors-ryam4iljr "Understanding CORS") Article ITNEXT · 3y Understanding CORS A post explaining CORS (Cross-Origin Resource Sharing) and its relevance in web development. It covers real-life examples, CSRF attacks, and provides code samples for implementing CORS in a backend API and frontend application. 291 17 2. 2 [](https://daily.dev/posts/7-common-front-end-security-attacks-rrmm7kxtb "7 Common Front End security attacks") Article DEV · 3y 7 Common Front End security attacks Web applications are becoming more attractive targets for cyber attacks, and front-end security is often neglected. This post discusses seven common front-end attacks and emphasizes the importance of stepping up security practices in front-end development. 247 5 3. 3 [](https://daily.dev/posts/github-certifications-are-generally-available-siat6frdy "GitHub Certifications are generally available") Article GitHub Blog · 3y GitHub Certifications are generally available GitHub Certifications are now available to all customers worldwide. The available certifications include GitHub Foundations, GitHub Actions, GitHub Advanced Security, and GitHub Administration. Study guides and verified credentials are provided for each certification. 213 9 4. 4 [](https://daily.dev/posts/secure-your-secrets-with-env-lozqexhls "Secure Your Secrets with .env") Article GitGuardian · 3y Secure Your Secrets with .env Using a .env file to store secrets provides a layer of protection in projects by keeping the secrets separate from the code and preventing them from being committed to version control. 102 5 5. 5 [](https://daily.dev/posts/top-7-common-frontend-security-attacks-s8eegtmyt "Top 7 Common Frontend Security Attacks") Article Bits and Pieces · 3y Top 7 Common Frontend Security Attacks Learn about the top 7 common frontend security attacks and how to protect your application from them. 88 1 6. 6 [](https://daily.dev/posts/are-you-using-jwts-for-user-sessions-in-the-correct-way--u0gxblmak "Are you using JWTs for user sessions in the correct way?") Article Community Picks · 3y Are you using JWTs for user sessions in the correct way? This post discusses the pros and cons of using JSON Web Tokens (JWTs) for user sessions and proposes a session management flow that combines JWTs and server sessions for optimal security and scalability. 77 3 7. 7 [](https://daily.dev/posts/the-ultimate-guide-to-api-keys-cx77zua4h "The Ultimate Guide to API Keys") Article asayer · 3y The Ultimate Guide to API Keys Learn about the purpose of API keys, how to secure them, and authentication methods to ensure authorized access to software or services. 46 8. 8 [](https://daily.dev/posts/how-to-secure-your-web-server-with-continuous-integration-using-nginx-and-circleci-qvxzrwcqb "How to Secure Your Web Server with Continuous Integration Using NGINX and CircleCI") Article freeCodeCamp · 3y How to Secure Your Web Server with Continuous Integration Using NGINX and CircleCI Learn how to secure your web server using NGINX and CircleCI by implementing Continuous Integration (CI), configuring SSL/TLS encryption and security headers, creating a GitHub repository and CircleCI project, defining a CI pipeline, and verifying the deployment and security of your web server. 41 9. 9 [](https://daily.dev/posts/how-to-set-up-authentication-in-your-apps-with-supabase-auth-s9szit3oy "How to Set Up Authentication in Your Apps with Supabase Auth") Article freeCodeCamp · 3y How to Set Up Authentication in Your Apps with Supabase Auth Learn about authentication and authorization concepts, session management with tokens and cookies, common authentication strategies, and how to use Supabase Auth. 28 1 10. 10 [](https://daily.dev/posts/how-to-secure-apis-built-with-express-js-zrmi2mdmg "How to secure APIs built with Express.js") Article Security Boulevard · 3y How to secure APIs built with Express.js Learn how to secure your Express.js APIs with tips on handling user input, implementing authentication and authorization, preventing security threats like XSS and SQL injection, and following best practices for Express.js security. 28 1 11. 11 [](https://daily.dev/posts/setting-up-a-free-vpn-server-in-aws-c2dikyu9u "Setting Up a Free VPN Server in AWS") Article AWS in Plain English · 3y Setting Up a Free VPN Server in AWS Learn how to set up a free VPN server on AWS and enjoy a secure and private internet connection. 26 1 12. 12 [](https://daily.dev/posts/how-to-defend-against-server-side-request-forgery-h1y91m6ab "How to Defend Against Server-Side Request Forgery") Article freeCodeCamp · 3y How to Defend Against Server-Side Request Forgery Learn about Server-Side Request Forgery (SSRF) and how it differs from CSRF. Discover methods to defend against SSRF attacks 26 13. 13 [](https://daily.dev/posts/the-definitive-guide-to-oauth-tokens-32hgjsnxu "The Definitive Guide to OAuth Tokens") Article Permit.io · 3y The Definitive Guide to OAuth Tokens Explore the guide to OAuth Tokens and learn about Access Tokens and Refresh Tokens for secure user authentication and authorization. 19 14. 14 [](https://daily.dev/posts/end-to-end-encryption-in-the-browser-j1mltlq3g "End-to-End Encryption in the Browser") Article Community Picks · 3y End-to-End Encryption in the Browser This post explores end-to-end encryption in the browser, explaining how traditional website architecture works, the concept of end-to-end encryption, and how the hash part of the URL can be used for encryption in a website. 19 15. 15 [](https://daily.dev/posts/an-introduction-to-role-based-access-control-rbac-from-basics-to-advanced-implementation-pwc9gplpk "An Introduction to Role Based Access Control (RBAC): From Basics to Advanced Implementation") Article Permit.io · 3y An Introduction to Role Based Access Control (RBAC): From Basics to Advanced Implementation Explore the fundamentals of Role Based Access Control (RBAC), its benefits, challenges, and alternatives for effective user permission management and application security. 16 16. 16 [](https://daily.dev/posts/how-to-use-sonarlint-to-write-cleaner-code-sush3szyn "How to Use SonarLint to Write Cleaner Code") Article freeCodeCamp · 3y How to Use SonarLint to Write Cleaner Code SonarLint is an open-source code analysis tool that helps you find and resolve security and code quality problems in your source code. It catches mistakes early, helps you follow coding standards, keeps your code secure, enables collaboration, saves time and effort, and helps you learn and improve. This post explains how to use SonarLint, its usefulness in web development, and how to set it up and integrate with your IDE. 15 1 17. 17 [](https://daily.dev/posts/10-ways-to-securing-microservices-in-2024-ai3qrcnwa "10 Ways To Securing Microservices in 2024") Article Bits and Pieces · 3y 10 Ways To Securing Microservices in 2024 Explore common threats to microservice architectures and discover strategies to secure microservices, including secure by design, zero trust architectures, access control, threat modeling, vulnerability management, incident response, secrets management, container security, service mesh, and circuit breaker patterns for availability. 15 18. 18 [](https://daily.dev/posts/cerbos-achieves-soc-2-type-ii-compliance-fyerzwfb9 "Cerbos achieves SOC 2 Type II compliance") Article Cerbos · 3y Cerbos achieves SOC 2 Type II compliance Cerbos has achieved SOC 2 Type II compliance, demonstrating their commitment to data security and compliance. This achievement benefits customers by ensuring their sensitive information and access controls are handled securely. 14 6 19. 19 [](https://daily.dev/posts/making-sure-laravel-s-debug-mode-is-always-disabled-in-production-6rdegwsd5 "Making sure Laravel's debug mode is always disabled in production") Article FREEK.DEV · 3y Making sure Laravel's debug mode is always disabled in production Recent discussions about the 'Androxgh0st' malware targeting Laravel apps and the importance of disabling debug mode in production. Learn how Oh Dear's application monitoring feature can help ensure debug mode is always disabled. 11 [See all Security archives](/tags/security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/security/best-of/2024/01#page","url":"https://daily.dev/tags/security/best-of/2024/01","name":"Best Security Posts — January 2024","description":"The most upvoted Security posts from January 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/security/best-of/2024/01#items","numberOfItems":19,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/understanding-cors-ryam4iljr","name":"Understanding CORS"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/7-common-front-end-security-attacks-rrmm7kxtb","name":"7 Common Front End security attacks"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/github-certifications-are-generally-available-siat6frdy","name":"GitHub Certifications are generally available"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/secure-your-secrets-with-env-lozqexhls","name":"Secure Your Secrets with .env"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/top-7-common-frontend-security-attacks-s8eegtmyt","name":"Top 7 Common Frontend Security Attacks"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/are-you-using-jwts-for-user-sessions-in-the-correct-way--u0gxblmak","name":"Are you using JWTs for user sessions in the correct way?"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/the-ultimate-guide-to-api-keys-cx77zua4h","name":"The Ultimate Guide to API Keys"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/how-to-secure-your-web-server-with-continuous-integration-using-nginx-and-circleci-qvxzrwcqb","name":"How to Secure Your Web Server with Continuous Integration Using NGINX and CircleCI"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/how-to-set-up-authentication-in-your-apps-with-supabase-auth-s9szit3oy","name":"How to Set Up Authentication in Your Apps with Supabase Auth"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/how-to-secure-apis-built-with-express-js-zrmi2mdmg","name":"How to secure APIs built with Express.js"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/setting-up-a-free-vpn-server-in-aws-c2dikyu9u","name":"Setting Up a Free VPN Server in AWS"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/how-to-defend-against-server-side-request-forgery-h1y91m6ab","name":"How to Defend Against Server-Side Request Forgery"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/the-definitive-guide-to-oauth-tokens-32hgjsnxu","name":"The Definitive Guide to OAuth Tokens"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/end-to-end-encryption-in-the-browser-j1mltlq3g","name":"End-to-End Encryption in the Browser"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/an-introduction-to-role-based-access-control-rbac-from-basics-to-advanced-implementation-pwc9gplpk","name":"An Introduction to Role Based Access Control (RBAC): From Basics to Advanced Implementation"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/how-to-use-sonarlint-to-write-cleaner-code-sush3szyn","name":"How to Use SonarLint to Write Cleaner Code"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/10-ways-to-securing-microservices-in-2024-ai3qrcnwa","name":"10 Ways To Securing Microservices in 2024"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/cerbos-achieves-soc-2-type-ii-compliance-fyerzwfb9","name":"Cerbos achieves SOC 2 Type II compliance"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/making-sure-laravel-s-debug-mode-is-always-disabled-in-production-6rdegwsd5","name":"Making sure Laravel's debug mode is always disabled in production"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Security","item":"https://daily.dev/tags/security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/security/best-of"},{"@type":"ListItem","position":5,"name":"January 2024"}]}]} ```