https://r0075h3ll.github.io/blog Notes on application security, web security and DevSecOps. en https://r0075h3ll.github.io/blog/content-security-policy-for-dummies https://r0075h3ll.github.io/blog/content-security-policy-for-dummies Sat, 31 May 2025 00:00:00 GMT How Content Security Policy works, which directives matter, and the common ways it gets bypassed. Security Browsers https://r0075h3ll.github.io/blog/hacking-electron-applications-101 https://r0075h3ll.github.io/blog/hacking-electron-applications-101 Sat, 31 May 2025 00:00:00 GMT A primer on how browsers work, what Electron is, how to reverse engineer Electron apps, and the misconfigurations attackers exploit. Electron hacking Security Web Security https://r0075h3ll.github.io/blog/open-redirects-everything-that-you-should-know https://r0075h3ll.github.io/blog/open-redirects-everything-that-you-should-know Sat, 31 May 2025 00:00:00 GMT Open redirects explained: how they happen, how to hunt for them, and a list of bypass payloads. open-redirect Security vulnerability Web Security https://r0075h3ll.github.io/blog/using-gitlab-for-devsecops https://r0075h3ll.github.io/blog/using-gitlab-for-devsecops Sat, 28 Sep 2024 00:00:00 GMT Basics of GitLab CI, and how to wire software composition analysis with vet into a pipeline. Devops DevSecOps GitLab VET supplychainsecurity SCA