Cosmic

I create beautiful things that actually work. Freelancing along the way 👾

[Cosmic @cosmicc1444]

Starting my journey here 🌷 To build things that make life a little smarter, prettier, and more human. Here to learn and share my journey with curiosity and consistency ✨
Tech + creativity = my happy place 🎀 #LearningInPublic #WomenWhoCode #WomenInTech #TechJourney

[Cosmic @cosmicc1444]

@Tech_girlll One in depth. However, Should be familiar with trending languages.

[Cosmic @cosmicc1444]

@YashHustle_22 Ofc C.

[Cosmic @cosmicc1444]

@ayesha_fatiima Even AI messed up with it.

[Cosmic @cosmicc1444]

Day2: Building Secured Applications

This is one of the MOST common real-world vulnerabilities.

And honestly:

many beginners accidentally create this vulnerability without realizing it.

[Cosmic @cosmicc1444]

Day2: Building Secured Applications

CSRF tokens ARE visible in frontend.

If user opens:

DevTools, Inspect, console, page source,they can see token.

Then Why Is It Still Secure?

Because:

only the CURRENT authenticated user/browser can access their own token.

[Cosmic @cosmicc1444]

Day2 : Building Secured Applications

Basically, injecting JS through user's input.

[Cosmic @cosmicc1444]

@CodeEdison Hey.

[Cosmic @cosmicc1444]

@tanujDE3180 I can choose any.
But my question is "Will they gonna choose me?"🙂

[Cosmic @cosmicc1444]

@rahidk85 That's even much more understandable!👏🏻

[Cosmic @cosmicc1444]

Day1 : Building a Secured Application

If attackers already have the hash values from the database, can’t they just use those hashes as passwords?

The website login system does NOT say:

“Give me the hash.”

It says:

“Give me the original password.”

Then it verifies to match.

[Cosmic @cosmicc1444]

@rahidk85 The next concept might gonna be securing your session credentials, maybe the whole point of adding it to security series must be this. I hope it make sense! ;))

[Cosmic @cosmicc1444]

Sessions and Cookies.

I made it easy for you to understand.

[Cosmic @cosmicc1444]

@rahidk85 Many freshers are not familiar with the fundamentals of basic security requirement, even when I started learning, I wasn't aware of it.

[Cosmic @cosmicc1444]

Day 1: Building a Secured Application

The real issue:

Whether input is treated as DATA or CODE.

That’s the entire security concept.

Separate SQL logic from user data!

[Cosmic @cosmicc1444]

If hashing regenerates every time because of salts, then how does verification ever match the stored hash?

[Cosmic @cosmicc1444]

@Ankiii_i I couldn't agree more!!

[Cosmic @cosmicc1444]

@IPL2025Auction RCB🎀

[Cosmic @cosmicc1444]

@suni_code What’s your go-to move when you hit a wall debugging?🫠

[Cosmic @cosmicc1444]

@sflorimm Well, JavaScript struggles when you need pure CPU computational power!

[Cosmic @cosmicc1444]

@Dhruvam987 Ask chatgpt !!💁🏻‍♀️