https://kevinpatel.xyz/ Recent content in Home on Kevin Patel Hugo -- gohugo.io en-us Fri, 15 May 2026 18:37:53 -0500 https://kevinpatel.xyz/posts/no-way-to-prevent-this/ Fri, 15 May 2026 18:37:53 -0500 https://kevinpatel.xyz/posts/no-way-to-prevent-this/ <p><img src="https://kevinpatel.xyz/posts/no-way-to-prevent-this/image.png" alt="Devastating"></p> <p>SAN FRANCISCO, CA - In the wake of a devastating supply chain attack in the npm registry that left millions of enterprise applications compromised and billions of user records exposed, developers across the JavaScript ecosystem expressed deep sorrow today, lamenting that such a crisis was completely unavoidable.</p> <p>“It’s a shame, but what can you do? This is just the price of building modern web apps,” said Senior Frontend Engineer Mark Vance, echoing the sentiments of a community that completely relies on a 40-level-deep nested tree of unvetted packages maintained by pseudonymous strangers to capitalize a single string. “There’s absolutely no way to foresee or prevent someone from taking over a long-abandoned utility package and injecting a crypto-miner into every production build in the world. It’s just an act of nature.”</p> https://kevinpatel.xyz/posts/intro-to-csp-report-to-headers/ Thu, 27 Jun 2024 13:43:47 -0500 https://kevinpatel.xyz/posts/intro-to-csp-report-to-headers/ <h2 id="csp-directives-report-to-and-report-uri">CSP Directives: <code>report-to</code> and <code>report-uri</code></h2> <p>The Content Security Policy (CSP) directives <code>report-to</code> and <code>report-uri</code> are used to specify where the browser should send violation reports when a content security policy is violated on a website.</p> <p><strong>Why Use Them:</strong></p> <ul> <li>Helps in identifying and fixing security issues on a website.</li> <li>Provides insights into potential attacks or vulnerabilities.</li> <li>Enhances the overall security posture of the website.</li> <li>PCI Compliance</li> </ul> <h2 id="report-uri---csp-directive"><code>report-uri</code> - CSP Directive</h2> <ul> <li>Legacy CSP directive that is used for reporting violations</li> <li>Deprecated but not all browsers support the newer directives so it is still recommended to be used</li> </ul> <p><img src="https://kevinpatel.xyz/posts/intro-to-csp-report-to-headers/report-uri-Can-I-use.jpg#center" alt="Image showing report-uri CSP directive support via Can I Use "></p> https://kevinpatel.xyz/posts/what-is-content-security-policy/ Mon, 13 May 2024 18:34:31 -0500 https://kevinpatel.xyz/posts/what-is-content-security-policy/ <h2 id="csp-directives-report-to-and-report-uri">CSP Directives: <code>report-to</code> and <code>report-uri</code></h2> <p>The Content Security Policy (CSP) directives <code>report-to</code> and <code>report-uri</code> are used to specify where the browser should send violation reports when a content security policy is violated on a website.</p> <p><strong>Why Use Them:</strong></p> <ul> <li>Helps in identifying and fixing security issues on a website.</li> <li>Provides insights into potential attacks or vulnerabilities.</li> <li>Enhances the overall security posture of the website.</li> <li>PCI Compliance</li> </ul> <h2 id="report-uri---csp-directive"><code>report-uri</code> - CSP Directive</h2> <ul> <li>Legacy CSP directive that is used for reporting violations</li> <li>Deprecated but not all browsers support the newer directives so it is still recommended to be used</li> </ul> <p><img src="https://kevinpatel.xyz/images/report-uri-Can-I-use.jpg#center" alt="Image showing report-uri CSP directive support via Can I Use "></p> https://kevinpatel.xyz/projects/securityblogs/ Sat, 16 Mar 2024 15:12:26 -0500 https://kevinpatel.xyz/projects/securityblogs/ A simple webpage that aggregates security related news and blog posts https://kevinpatel.xyz/projects/obsidian-day-and-night/ Thu, 28 Jul 2022 00:00:00 +0000 https://kevinpatel.xyz/projects/obsidian-day-and-night/ <div class="github-card"> <div style="padding-left:25%"> <div class="github-card" data-github="CyberT17/obsidian-day-and-night" data-width="400" data-height="179" data-theme="default"></div> </div> <script src="//cdn.jsdelivr.net/github-cards/latest/widget.js"></script> </div> <p>This project is a plugin that automatically switches the theme of <a href="https://obsidian.md/">Obsidian</a>, a note-taking app that uses plain text files with markdown and interlinking capabilities. The plugin allows users to customize their preferred themes for day and night modes, and set the time intervals for switching. The plugin also detects the system’s dark mode settings and adjusts accordingly. The plugin was developed using Typescript and CSS, and was tested on Windows, and Mac OS.</p> https://kevinpatel.xyz/pages/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://kevinpatel.xyz/pages/about/ <p>Hi there, I&rsquo;m Kevin. I am an AppSec engineer at NISC. more to come &hellip; some day.</p>