Report URI

@reporturi

Client-side security to control what code actually runs on your website.

Earth

report-uri.com

Replies Reposts Media

Report URI
@reporturi
Sep 8
Dependabot alerted us to a DOM XSS vulnerability in the software behind our own documentation site. We developed a working PoC to understand the risk, but when we tested it against production, our CSP blocked the injected JavaScript and Report URI captured the evidence.
How Report URI saved Report URI: an XSS CVE in our own docs
From blog.report-uri.com
Report URI
@reporturi
Sep 4
Our logo's in good company this weekend. 🏁 Will Orton & Jessica Hawkins go into Donington Park leading British GT4! 😎 Proud to back the #21 Aston Martin. MK Racing @AMR_Official #BritishGT #GT4
Made with AI
Report URI
@reporturi
Sep 3
Do you know exactly what JavaScript ran in your users’ browsers? We fingerprint every executed script, alert when something changes, and preserve a verified copy for investigation. Zero code on your page.
We can prove exactly what JavaScript ran in your users’ browsers
From blog.report-uri.com
Report URI
@reporturi
Sep 2
One loader. Two attacks. The same malicious infrastructure delivers either a #Magecart card skimmer or a #ClickFix payload, depending on the compromised site. We break down the loader, payloads and infrastructure connecting them:
One loader, two attacks: a Magecart and ClickFix operator sharing infrastructure
From blog.report-uri.com
Report URI
@reporturi
Sep 1
🚀 Connection Allowlist is now in open beta at Report URI! Build an egress firewall directly into the browser: control where pages can connect, block unauthorised destinations and detect attempted data exfiltration. Learn more and try it now 👇
Connection Allowlist: an egress firewall for the browser
From blog.report-uri.com