“authorization”的搜索结果

Implement GCP Binary Authorization to enforce Dağıt:-time security controls that ensure only trusted, attested container images are Dağıtılmış to Google Kubernetes Engine and Cloud Run.

中文简介正在准备中。当前显示原文说明。

Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to Belirle: if the server enforces per-object authorization. This is OWASP API Security Top 10 2023 risk ...

中文简介正在准备中。当前显示原文说明。

tespit etme
and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.

中文简介正在准备中。当前显示原文说明。

Use when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated / @PermitAll, SecurityIdentity, permission checks, path-based authorization in configuration, exception mapping for auth failures, and sensitive-data-safe logging. This should trigger for requests such as Add Quarkus security support; Review Quarkus security configuration; Improve API authorization in Quarkus; Add JWT/OIDC security in Quarkus; Harden Quarkus authorization rules. Part of cursor-rules-java project

中文简介正在准备中。当前显示原文说明。

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.

中文简介正在准备中。当前显示原文说明。

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities including excessive data exposure and mass assignment attacks.

中文简介正在准备中。当前显示原文说明。

检查Django应用的登录、权限、输入处理和生产配置，梳理恶意查询、脚本注入及非预期请求的防护，并审查文件上传、API保护、密钥管理和安全日志。

• 审查登录与用户权限
• 上线前检查生产配置
• 审查输入处理与请求防护

Guide Git operations with explicit authorization for history changes and destructive actions. It defines recovery snapshots before discarding work, careful handling of locks and index corruption, and checks that keep unexplained changes out of commits.

中文简介正在准备中。当前显示英语简介。

• Keeping completed changes available for review before committing
• Saving a recovery snapshot before an authorized discard
• Handling Git locks or a corrupted index

Find practical meeting or appointment times while accounting for availability, working hours, travel, and time zones. Arrange private holds or invitations, reschedule or cancel within authorization, and distinguish proposed times from confirmed bookings.

中文简介正在准备中。当前显示英语简介。

• Find meeting times with travel buffers
• Create a private hold or send an invitation
• Reschedule one occurrence of a recurring meeting

Prepare restaurant orders for delivery or pickup by comparing options, building a cart, and checking the full cost and timing. Account for dietary requirements, obtain authorization to order, and confirm acceptance and available tracking details.

中文简介正在准备中。当前显示英语简介。

• Order a usual meal for delivery to a hotel
• Arrange a team lunch with separate dietary needs
• Compare delivery and pickup within a budget

Helps build LabArchives connections for electronic lab notebooks and laboratory inventory. Guides endpoint selection, request signing for authentication, and user authorization, with local tools to inspect container files and prepare redacted request plans before remote operations.

中文简介正在准备中。当前显示英语简介。

• Plan an electronic lab notebook API connection
• Check authentication for laboratory inventory requests
• Inspect an LA container file locally

Manage a Binance Web3 wallet through the baw command-line tool. Check balances, transfer or swap tokens, manage limit orders and token permissions, and access prediction markets and DeFi, blockchain-based financial services.

中文简介正在准备中。当前显示英语简介。

• Check wallet balances and transaction history
• Send tokens, swap assets, and manage limit orders
• Review and revoke token spending permissions

Route reverse engineering and security tasks to a specialist skill based on the target, purpose, and available tools. Establish the case scope and authorization status, then prepare supported tools before handing off the work.

中文简介正在准备中。当前显示英语简介。

• Choose a specialist skill for an unfamiliar analysis task
• Route work spanning several security disciplines
• Record case scope and authorization before analysis

Prepare a specified software version for release by checking version consistency and changelog readiness, building packages, and testing basic behavior. Produce checksums, release notes, and a readiness report; public release actions require separate authorization.

中文简介正在准备中。当前显示英语简介。

• Check version consistency and changelog readiness
• Build release packages and test basic behavior
• Prepare checksums and release notes

Review incoming GitHub issues and pull requests, verify claims, and organize evidence alongside existing decisions. Prepare unresolved choices with recommendations and consequences for maintainers, then carry out actions covered by verified authorization without merging changes.

中文简介正在准备中。当前显示英语简介。

• Sorting incoming bug reports and feature requests
• Applying approved rules to duplicate reports
• Preparing evidence and options for maintainer decisions

Assess REST, GraphQL, and gRPC APIs for authentication, access control, input validation, and business logic weaknesses. Use OWASP API Security Top 10, a framework of common API risks, to organize testing and document findings with reproduction steps and remediation.

中文简介正在准备中。当前显示英语简介。

• Comparing API access across user roles
• Checking token handling and request rate limits
• Assessing GraphQL access control and data exposure

Build web apps that run inside the Zoom client using SDK setup guidance, authorization examples, shared participant state, and custom video layouts. The reference also helps diagnose blank panels, missing capabilities, and other runtime problems.

中文简介正在准备中。当前显示英语简介。

• Build a web app that runs inside Zoom
• Implement authorization inside the Zoom client
• Create custom video layouts or camera overlays

Choose an authentication flow for a Zoom integration, define scopes that control access, and understand token renewal. Use the reference examples and error tables to investigate failed authorization or token requests.

中文简介正在准备中。当前显示英语简介。

• Choosing authentication for Zoom backend automation
• Planning token renewal for a user-facing app
• Investigating redirect URI and authorization errors

Guide changes to cmux CLI and socket commands with rules for thread use, app focus, and remote relay authorization. It helps keep frequent status updates off the main thread and preserve focus during background automation.

中文简介正在准备中。当前显示英语简介。

• Review thread handling for new socket commands
• Keep automated operations from stealing app focus
• Check focus behavior when opening panes or workspaces

Audit and strengthen security for applications running on GKE. Configure pod traffic restrictions, sandbox isolation, namespace security standards, and Secret Manager volume mounts to protect workloads at the application and namespace level.

中文简介正在准备中。当前显示英语简介。

• Auditing GKE security settings
• Restricting communication within a namespace
• Isolating risky pods and applying security standards

Implement application security controls, including login, access permissions, password hashing, and input validation. The skill provides code, configuration requirements, and testing guidance for checking protections against unauthorized access, malicious input, and sensitive data exposure.

中文简介正在准备中。当前显示英语简介。

• Implementing login with password hashing and rate limits
• Adding JWT validation and session protection
• Preventing SQL injection and malicious script execution

Combine Convex authorization, code quality, performance, and failure audits into one readiness report. It removes duplicate findings, scores confirmed issues with a stated formula, and orders the fixes while clearly identifying checks that could not run.

中文简介正在准备中。当前显示英语简介。

• Reviewing a Convex app before launch
• Combining audit findings into one report
• Prioritizing authorization and performance fixes

Route Convex development and operations requests to the relevant specialist skills and current procedures, covering app setup, backend features, code reviews, authorization checks, production monitoring, data migrations, and cost analysis.

中文简介正在准备中。当前显示英语简介。

• Start a new full-stack app with Convex
• Add authentication, billing, or search to an existing app
• Review backend code and authorization

Compares code relationships before and after a branch, pull request, or release change using Trailmark. Flags structural security regressions, such as removed authorization checks or newly reachable sensitive operations, and provides evidence for reviewers.

中文简介正在准备中。当前显示英语简介。

• Checking structural security changes before merging a PR
• Reviewing call paths after a security fix
• Assessing attack surface changes in a release