Articles about Drupal and Technology

In 2018, Drupal added support for oEmbed in media and the ability to serve them from a subdomain to improve security against XSS attacks. Although the resources are displayed in iframes, doing so under the same domain can be insecure...

How we got 10/10 in the Dries' HTTP Header Analyzer tool.

oEmbed is a format that allows embedding of a properly represented URL. This means rendered in a way that is useful to the visitor. Even clearer: it allows to include things like tweets, video from different providers, Flickr albums and...

HTTP security headers are a security measure that almost nobody uses but they are extremely powerful (and annoying to configure).