← CodeClarityLab Home
Browse by Category
+ added · updated 7d
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Web Cache Deception
Tricking a cache into storing sensitive authenticated responses by appending a static-file-like suffix to a private URL.
CWE-524 OWASP A5:2021
2mo ago security advanced 7.5
Web Components ES2018
A suite of native browser APIs (Custom Elements, Shadow DOM, HTML Templates) for creating reusable, encapsulated HTML elements without frameworks.
2mo ago frontend advanced
Web Storage, IndexedDB & Cookies HTML5
Three client-side storage mechanisms: localStorage (persistent key-value), sessionStorage (tab-scoped), and IndexedDB (structured, queryable) — each suited to different data sizes and use cases.
2mo ago javascript intermediate
Web Workers ES2015
Background threads in the browser that run JavaScript without blocking the main thread — essential for CPU-intensive tasks that would otherwise freeze the UI.
2mo ago javascript advanced
Webhooks PHP 5.0+
A reverse API — a service POSTs event notifications to a registered URL whenever something occurs, eliminating the need to poll.
2mo ago architecture beginner
Diagram: WebSocket Protocol WebSocket Protocol PHP 7.0+
A full-duplex communication protocol over a single TCP connection — the client and server can both send messages at any time without polling.
2mo ago networking intermediate
WebSockets PHP 7.0+
A persistent full-duplex TCP connection enabling real-time bidirectional messaging between browser and server without polling overhead.
2mo ago architecture intermediate
Xdebug — Debugging & Profiling PHP 5.0+
The essential PHP debugging extension providing step debugging, stack traces, code coverage, and profiling output.
2mo ago php beginner
XML Entity Expansion (Billion Laughs / XXE) PHP 5.0+
Denial-of-service via exponentially nested XML entities (Billion Laughs) or SSRF/file-read via external entity references (XXE).
CWE-611 OWASP A5:2021
2mo ago security intermediate 9.1
XML External Entity (XXE) PHP 5.0+
A vulnerable XML parser processes external entity references, letting attackers read local files or trigger SSRF.
CWE-611 OWASP A5:2021
2mo ago security advanced 8.2
XML Injection PHP 5.0+
Unsanitised user input injected into XML documents alters their structure, potentially corrupting data or enabling further attacks.
CWE-91 OWASP A3:2021
2mo ago security intermediate 7.5
XPath Injection PHP 5.0+
Unsanitised input manipulates XPath queries against XML documents, enabling data extraction or authentication bypass.
CWE-643 OWASP A3:2021
2mo ago security intermediate 7.5
YAGNI PHP 5.0+
You Aren't Gonna Need It — don't implement functionality until it's actually required.
2mo ago quality beginner
Yoda Conditions PHP 5.0+
Writing comparisons with the constant on the left (42 === $x) to prevent accidental assignment — largely obsolete with modern tooling.
2mo ago style beginner
Zero Downtime Deployment PHP 5.0+
Deploying new application code without dropping a single request — using rolling updates, blue/green swaps, or atomic symlink switches.
2mo ago devops intermediate
Zero Trust PHP 5.0+
Never trust, always verify — authenticate and authorise every request regardless of network location.
2mo ago general intermediate
Zero-Day Vulnerability
A security flaw unknown to the vendor with no available patch — attackers may have exploits in the wild before defenders can respond.
2mo ago security intermediate
Zip Slip PHP 5.0+
A path traversal attack via crafted archive filenames (e.g. ../../evil.php) that escape the extraction directory during unzip.
CWE-22 OWASP A1:2021
2mo ago security intermediate 8.1
Diagram: Batch Processing Batch Processing PHP 5.5+
Processing records in grouped chunks rather than one at a time, reducing per-record overhead and enabling efficient bulk database operations.
2mo ago performance intermediate
Diagram: bcrypt bcrypt PHP 5.5+
A deliberately slow password hashing algorithm designed to resist brute-force attacks by tunable computational cost.
CWE-327 OWASP A2:2021
2mo ago security intermediate
✓ schema.org compliant