DEV Community

Client Trust & Agent Hijack Defense Series' Articles

Back to Muhammad Ali Mughal's Series
Prompt Injection via Docs Your Tools Fetch: Markdown, READMEs & Issue Bodies
Cover image for Prompt Injection via Docs Your Tools Fetch: Markdown, READMEs & Issue Bodies
muhammadalimughal profile

Prompt Injection via Docs Your Tools Fetch: Markdown, READMEs & Issue Bodies

#security #ai #webdev #privacy
1
Comments
7 min read
WebMCP & Tool-Calling Attack Surfaces: What an E-Shop Can Make an Agent Do
Cover image for WebMCP & Tool-Calling Attack Surfaces: What an E-Shop Can Make an Agent Do
muhammadalimughal profile

WebMCP & Tool-Calling Attack Surfaces: What an E-Shop Can Make an Agent Do

#security #ai #webdev #privacy
Comments
7 min read
Subresource Integrity & CDN Script Pinning: Catching Silent Payload Swaps
Cover image for Subresource Integrity & CDN Script Pinning: Catching Silent Payload Swaps
muhammadalimughal profile

Subresource Integrity & CDN Script Pinning: Catching Silent Payload Swaps

#security #webdev #javascript #frontend
Comments
8 min read
CSP, Trusted Types & Residual XSS: Reading Reports Like a Forensics Log
Cover image for CSP, Trusted Types & Residual XSS: Reading Reports Like a Forensics Log
muhammadalimughal profile

CSP, Trusted Types & Residual XSS: Reading Reports Like a Forensics Log

#security #webdev #javascript #xss
Comments 1
8 min read
Extension & npm Postinstall Forensics: Homoglyphs, Base64 & Unexpected Network
Cover image for Extension & npm Postinstall Forensics: Homoglyphs, Base64 & Unexpected Network
muhammadalimughal profile

Extension & npm Postinstall Forensics: Homoglyphs, Base64 & Unexpected Network

#security #npm #javascript #webdev
Comments
8 min read