--- title: Best Web Security posts of 2023 | daily.dev description: The most upvoted Web Security posts of 2023, curated by the daily.dev community. canonical: https://daily.dev/tags/web-security/best-of/2023 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/web-security/best-of/2023 og:type: website og:site_name: daily.dev og:title: Best Web Security posts of 2023 | daily.dev og:description: The most upvoted Web Security posts of 2023, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Web Security — 2023 1. 1 [](/posts/key-computer-science-concepts-every-software-engineer-should-know-and-how-to-learn-them-rnsf1cxqd "Key Computer Science Concepts Every Software Engineer Should Know – and How to Learn Them") Article freeCodeCamp · 3y Key Computer Science Concepts Every Software Engineer Should Know – and How to Learn Them The more fundamentals you know, the less you will struggle learning new things. There are 10 core subjects which, if you learn them, will give you a solid foundation. The book I recommend to learn programming is Structures and Interpretations of Computer Programs (SICP) The book is free and has a set of MIT lectures. 60 4 2. 2 [](/posts/using-helmet-in-node-js-to-secure-your-application-vb5kc52ew "Using Helmet in Node.js to secure your application") Article LogRocket · 4y Using Helmet in Node.js to secure your application Helmet.js is a middleware-based technology that improves security in Node.js applications by safeguarding HTTP headers. It protects against common security threats like XSS attacks and click-jacking. Integrating Helmet into a Node.js Express app is simple and only requires a few lines of code. 36 2 3. 3 [](/posts/cloudflare-is-free-of-captchas-turnstile-is-free-for-everyone-xb0zsnqty "Cloudflare is free of CAPTCHAs; Turnstile is free for everyone") Article Cloudflare · 3y Cloudflare is free of CAPTCHAs; Turnstile is free for everyone Cloudflare has eliminated CAPTCHAs and made Turnstile, its bot-stopping solution, available for free to all website operators. Turnstile's checkbox solution is just as effective as a CAPTCHA without requiring user interactivity. It uses various in-browser tests to analyze browser characteristics and detect bots. Over 1 million automated signup attempts have been blocked by Turnstile. During the beta, Turnstile received feedback and added new features, such as support for additional languages and error code transparency. Turnstile is now in general availability and is free to use. 32 3 4. 4 [](/posts/what-is-tabnabbing-and-how-to-prevent-it-wfu8ahznb "What is Tabnabbing and How to Prevent it") Article freeCodeCamp · 3y What is Tabnabbing and How to Prevent it Tabnabbing is a type of phishing attack that targets inactive tabs in a browser, redirecting users to malicious sites resembling legitimate ones. To prevent tabnabbing, you can use the \`noopener\` and \`noreferrer\` attributes when opening links in a new tab. 30 5. 5 [](/posts/jwt-json-web-tokens-explanation-exploitation-0x02--19fchztfv "JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x02)") Article InfoSec Write-ups · 4y JWT \[JSON WEB TOKENS\] \[EXPLANATION & EXPLOITATION\] (0x02) This post explains the concept of JSON Web Tokens (JWT), specifically focusing on the explanation and exploitation of JWT header parameters such as JWK and JKU. It provides examples and discusses techniques for exploiting these parameters. 29 6. 6 [](/posts/my-client-website-got-hacked-lessons-learned-and-steps-to-strengthen-website-security-2j5rovfsc "My Client Website Got Hacked: Lessons Learned and Steps to Strengthen Website Security") Article Dev Genius · 4y My Client Website Got Hacked: Lessons Learned and Steps to Strengthen Website Security Lessons learned from a client website getting hacked and steps to strengthen website security. 26 1 7. 7 [](/posts/cloudflare-mitigates-record-breaking-71-million-request-per-second-ddos-attack-x5zxewwnw "Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack") Article Cloudflare · 4y Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack Cloudflare mitigates a record-breaking DDoS attack of 71 million requests per second. The attacks were HTTP/2-based and targeted websites protected by Cloudflare. The post discusses the increase in DDoS attacks and provides steps to defend against them. 11 1 [See all Web Security archives](/tags/web-security/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/web-security/best-of/2023#page","url":"https://daily.dev/tags/web-security/best-of/2023","name":"Best Web Security Posts of 2023","description":"The most upvoted Web Security posts of 2023, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/web-security/best-of/2023#items","numberOfItems":7,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/key-computer-science-concepts-every-software-engineer-should-know-and-how-to-learn-them-rnsf1cxqd","name":"Key Computer Science Concepts Every Software Engineer Should Know – and How to Learn Them"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/using-helmet-in-node-js-to-secure-your-application-vb5kc52ew","name":"Using Helmet in Node.js to secure your application"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/cloudflare-is-free-of-captchas-turnstile-is-free-for-everyone-xb0zsnqty","name":"Cloudflare is free of CAPTCHAs; Turnstile is free for everyone"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/what-is-tabnabbing-and-how-to-prevent-it-wfu8ahznb","name":"What is Tabnabbing and How to Prevent it"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/jwt-json-web-tokens-explanation-exploitation-0x02--19fchztfv","name":"JWT [JSON WEB TOKENS] [EXPLANATION & EXPLOITATION] (0x02)"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/my-client-website-got-hacked-lessons-learned-and-steps-to-strengthen-website-security-2j5rovfsc","name":"My Client Website Got Hacked: Lessons Learned and Steps to Strengthen Website Security"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/cloudflare-mitigates-record-breaking-71-million-request-per-second-ddos-attack-x5zxewwnw","name":"Cloudflare mitigates record-breaking 71 million request-per-second DDoS attack"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Web Security","item":"https://daily.dev/tags/web-security"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/web-security/best-of"},{"@type":"ListItem","position":5,"name":"2023"}]}]} ```