Episode 158 - More Supply Chains, 2021 Top Ten, CORS + CSRF
- Author
- Ken Johnson and Seth Law
- Published
- Tue 18 Jan 2022
- Episode Link
- https://absolute-appsec-eps.s3.us-west-1.amazonaws.com/episodes/Absolute_AppSec_Ep_158.mp3
Yet another episode. Always something to discuss. Ken and Seth talk about a recent article covering *theoretical* software supply chain exploits and how this will be a big thing this year. A review of Portswigger's nominations for Top Ten Web Hacking techniques of 2021. Finally, a discussion on the upcoming Chrome changes to do pre-flight requests for non-routable IP address CSRF requests.
