Patrick Kerrigan

Blog

Chrome XSS Auditor and HTML editors

by Patrick Kerrigan, . Tags: Security Web

SVG and Content Security Policy in Edge

by Patrick Kerrigan, . Tags: Security Bugs

Recently I've been trying to make some improvements to sites that I'm ivolved with, particularly converting images to SVG format and implementing HTTP Content Security Policy (more to come on those later). While doing so I ran into a strange issue to do with how Microsoft Edge handles the combination of these two technologies which only seems to be documented in an Edge bug report.

Keeping unit tests specific

by Patrick Kerrigan, . Tags: Testing Programming

AWS Aurora Multi-AZ reserved instances

by Patrick Kerrigan, . Tags: Aws

The documentation surrounding AWS Aurora reserved instances is a little confusing. One of its main selling points is seamless Multi-AZ replication at the storage level; however, when you purchase reserved instances the Multi-AZ option is fixed at "No". Does this mean you can't run read replicas in another AZ if you're using reserved instances? Will you be charged the on-demand rate for your read replicas?

Protecting your domain with DMARC

by Patrick Kerrigan, . Tags: Email Security

In order to combat spam and fraudulent email it's become common practice to deploy technologies such as SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) to provide a means for receivers to verify whether a message is from who it claims to be. Unfortunately, these are not foolproof and can still allow fraudulent messages to slip through. There's also no way of knowing what a receiver will do with messages that fail these checks and no way of knowing how effective they are. DMARC (Domain-based Message Authentication, Reporting and Conformance) goes some way towards improving this.
Older posts Newer posts