Systems & architecture

#owasp

2 posts tagged #owasp on DiCodeWeb, from fundamentals to production, newest first.

2 postsUpdated Oct 24, 2026

Oct 24, 2026

LLM and Agent Application Security: Prompt Injection, Excessive Agency and the OWASP Top 10 for LLMs

A practical threat model for applications that put an LLM between tools and private data: direct and indirect prompt injection, the lethal trifecta, and the design patterns that keep the damage contained, mapped against the OWASP Top 10 for LLM Applications.

Systems & architecture23 min

Oct 20, 2026

The OWASP API Security Top 10 in NestJS: vulnerable code, fixed code, and the tests that keep it fixed

All ten risks of the OWASP API Security Top 10 (2023) worked through in NestJS: ownership checks in scoped repositories, whitelisted DTOs, response shaping, CASL policies, cost-based rate limits, idempotent business flows, SSRF-safe fetch, and an authorization matrix in e2e tests.

Systems & architecture17 min

All tags

#security
#ai
#api
#llm
#nestjs

Posts

LLM and Agent Application Security: Prompt Injection, Excessive Agency and the OWASP Top 10 for LLMs

The OWASP API Security Top 10 in NestJS: vulnerable code, fixed code, and the tests that keep it fixed

Related tags