Security & BackupsTutorial
SVG on a website
An accepted SVG is not automatically safe in every context. Check trusted originals, upload processing, image-versus-document behavior and a faithful raster fallback.
6 min readRead
Blog & guides
Clear explanations and practical steps for building and running a website.
Go straight to your questionFix a problem or make a decision
Format & sorting
68 guides
Page 4 of 6
Security & BackupsTutorial
Content decoding failed
Investigate compressed-response failures without confusing them with broken accents. Compare response bytes, coding declarations, negotiation and cached variants across delivery layers.
6 min readRead
Security & BackupsTutorial
HTTP 431 errors: find oversized request headers without clearing every cookie
Distinguish request-header size failures from large uploads and rate limits. Compare sessions safely, trace cookie growth and repair the writer or delivery limit that actually failed.
6 min readRead
Security & BackupsTutorial
Verify a download checksum without mistaking it for a safety guarantee
Compare a downloaded file with a trusted SHA-256 reference. Choose the exact release, inspect mismatches and distinguish hashes from signatures and safety.
6 min readRead
Security & BackupsTutorial
Can website photos reveal your location? Review metadata and the published files
Check photo location data before publication, preserve a private original and inspect what visitors can actually download. Resizing alone is not proof of removal.
6 min readRead
Security & BackupsTutorial
Public source maps
Decide whether a public source map belongs in your release. Inspect original contents, deployed copies and real secrets while preserving useful private debugging.
7 min readRead
Security & BackupsTutorial
Add security.txt to your website
Give researchers a clear reporting route with security.txt, a monitored contact and a maintained policy. Understand scope, expiry and what the file does not authorise.
8 min readRead
Security & BackupsTutorial
Can your CSV export run formulas? Review spreadsheet interpretation before staff open it
Visitor-supplied text can change meaning when opened in a spreadsheet. Separate viewing and machine exports, preserve source data and test the complete workflow.
7 min readRead
Security & BackupsTutorial
Can a cache expose private pages? Check personalised responses across users
Distinguish browser and shared caches, choose deliberate response policies and test two synthetic accounts before trusting a personalised page.
7 min readRead
Security & BackupsTutorial
Website chatbot prompt injection
A hostile instruction can arrive inside a page or document. Design your chatbot so retrieved text cannot grant permissions, reveal private records or execute actions.
8 min readRead
Security & BackupsTutorial
Block AI training crawlers without blocking AI search
Separate training, search and user-triggered access, then test the robots.txt response and firewall together before changing crawler policy.
8 min readRead
Security & BackupsTutorial
NordVPN on a router or device apps
Compare portable app control with a maintained shared-router route. Check encryption boundaries, exact firmware, manual protocols, feature scope and recovery before choosing.
7 min readRead
About the guide library
Find an answer, a decision or a practical next step. Choose a topic and format: explanations, buying guides, comparisons, tutorials or editorial opinion.