Hacksplaining
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance
Sign Up
Log In
FeaturesLessonsEnterpriseThe BookOWASP Top 10PCI Compliance Sign Up Log In

Lax Security Settings

Make sure you carefully define what domains and sub-domains are used to serve content on your site. The increasingly common use of content delivery networks (CDNs) requires sites to incorporate content served by a third-party. "Unclaimed" CDN buckets can be used to serve malicious content under your certificate.

Illustration of subdomain squatting
Lessons
Glossary
Terms and Conditions
Privacy Policy

© 2026 Hacksplaining Inc. All rights reserved. Questions? Email us at support@hacksplaining.com