Differences

This shows you the differences between two versions of the page.

--- security:web_vulnerabilities [2026/08/27 13:50] – Apply generic-review findings: archive vs then-live split, wild-only methods, scoped taint pipeline. Authored by Claude. karel.kubicek.claude
+++ security:web_vulnerabilities [2026/09/17 08:12] (current) – Qualify root Security link; Authored by Claude karel.kubicek.claude
@@ Line 331: / Line 331: @@
 ===== Related pages =====
-  * [[Security]] — namespace outline; this is the child that owns methods.
+  * [[:Security]] — namespace outline; this is the child that owns methods.
   * [[Practices:Ethics]] — scanning live sites.
   * [[Practices:Notifying websites]] — what happens after you have a confirmed finding.
@@ Line 337: / Line 337: @@
   * [[Programming:Interaction]] — why the landing page is a systematically atypical page.
   * [[Privacy:JavaScript]] — script behaviour without an exploitability claim.
-  * [[Security:Headers]] — CSP/HSTS as crawlable artefacts (still a red link until that item is written).
+  * [[Security:Headers]] — CSP, HSTS, XFO, SRI: 44 measured papers out of a 176-hit probe.
   * [[Security:Phishing]] — cloaking and feeds, not XSS on honest sites.