The article explains JWT fundamentals, why pure stateless tokens cannot be revoked, compares blacklist and whitelist Redis strategies, discusses token renewal with double‑token design, and shows how to articulate the right answer in an interview.
Learn how to control access in Nginx by configuring IP-based allow/deny rules, using external whitelist files, leveraging the ngx_http_geo_module for IP and country restrictions, and setting up GeoIP modules with sample configurations and commands for both Linux distributions.
This tutorial explains how to use Nginx’s allow and deny directives, include external whitelist files, configure the ngx_http_geo_module for IP‑based access control, and set up country‑level restrictions with the geoip module, providing concrete configuration examples and command‑line steps for both black‑ and white‑listing.
This guide explains two ways to whitelist files or folders in Windows Defender: a step‑by‑step manual method through the Windows Security UI and a PowerShell command‑line approach for adding or removing exclusion paths.
This guide walks through enabling IP access control in INFINI Gateway, showing how to configure whitelist and blacklist rules, combine both, and verify the settings with example configurations and screenshots to secure Elasticsearch services.
In the second part of Baidu’s APK‑size‑optimization series, the team uses the Titan‑Dex framework to strip unnecessary build‑type and system Dex annotations—such as generic signatures and class‑relationship metadata—while automatically generating a whitelist via custom Lint detectors, ultimately shrinking the final Dex by about 1.2 MB.
This article explains Android's Doze power‑saving mode, detailing its light and deep doze states, the restrictions imposed on apps, the state‑machine transitions, whitelist mechanisms, and common troubleshooting Q&A for developers working on mobile devices.
This article explains how to add a reusable appkey whitelist check to a Spring‑Boot web framework by comparing four implementation methods—traditional AOP, Spring Interceptor, custom ArgumentResolver, and Servlet Filter—detailing their code, configuration steps, extensions, and execution order.
This article explains how MySQL implements trusted IP access control via user@host definitions, demonstrates creating and updating user accounts and associated metadata tables, and provides step‑by‑step procedures—including DCL commands, metadata updates, and handling of stored objects—to safely modify trusted IPs in production environments.
This article demonstrates how DBLE manages table-level DML permissions, global blacklist rules, and user‑IP whitelist controls, showing configuration steps, reload procedures, and the resulting effects on query execution and login access.
This article explains how Python's eval can execute arbitrary code, demonstrates multiple bypass techniques—including __import__, __builtins__ manipulation, and object subclass exploitation—and shows how to safely restrict eval using whitelist globals or ast.literal_eval to prevent code injection and denial‑of‑service attacks.
The article explains how a widespread Java serialization vulnerability lets attackers execute remote commands by deserializing malicious objects, and describes a practical mitigation that overrides ObjectInputStream’s resolveClass method to enforce a whitelist, preventing unauthorized class instantiation without rewriting application code.
This guide walks through downloading, installing, and configuring GitLab CE 7.9 on Ubuntu 14.04, covering nginx workarounds, whitelist setup for rack_attack, essential configuration changes, login credentials, and references to official documentation and update logs.
This guide walks through configuring vsftpd on Linux, covering how to set up black and white lists, differentiate internal and external network access, and create virtual users with proper permissions and SELinux contexts, all illustrated with step‑by‑step screenshots.
