The Code Lab

Planes, Ferries and Automobiles

How I Hacked Free Travel Across Iceland

Posted by Stefán Orri Stefánsson on March 4, 2024

HTTP and TLS handling with the Go HTTP client

Building a web security scanner - part 1

Posted by Stefán Orri Stefánsson on November 1, 2017

Introducing WebSecurity.is

Web security scanner to help harden web apps

Posted by Stefán Orri Stefánsson on May 15, 2017

Don't let Content Security Policy fool you into a false sense of security

Whitelisting big content delivery networks can be a bad idea

Posted by Stefán Orri Stefánsson on April 1, 2016

Fallback for CDN Provided JS When Using CSP

How to provide local js library fallback when inline scripts are disallowed

Posted by Stefán Orri Stefánsson on October 18, 2015

Unblocking Netflix Could Put You at Risk

Take precautions when using third party DNS and VPNs

Posted by Stefán Orri Stefánsson on September 3, 2015

HTTP Public Key Pinning Usage is Essentially Zero

A slow start for the new security standard

Posted by Stefán Orri Stefánsson on May 12, 2015

Automating Website Analysis

Analyzing the top 5000 sites on the net with Selenium WebDriver

Posted by Stefán Orri Stefánsson on April 22, 2015

You've Been Framed!

A survey of iframes and the sandbox attribute

Posted by Stefán Orri Stefánsson on April 15, 2015