Security on Yeah, I Made a Websitehttps://site.aaronhsyong.com/categories/security/Recent content in Security on Yeah, I Made a WebsiteHugo -- gohugo.ioenaaronhsyong2@gmail.com (Aaron Yong)aaronhsyong2@gmail.com (Aaron Yong)© 2026 Aaron YongFri, 17 Apr 2026 00:00:00 +0000Why Postman Works But Your Browser Doesn'thttps://site.aaronhsyong.com/posts/why-postman-works-but-your-browser-doesnt/Fri, 17 Apr 2026 00:00:00 +0000aaronhsyong2@gmail.com (Aaron Yong)https://site.aaronhsyong.com/posts/why-postman-works-but-your-browser-doesnt/CORS isn’t your server blocking requests — it’s your browser protecting users. Here’s what’s actually happening.Top 10 Greatest Hits of 2025https://site.aaronhsyong.com/posts/top-10-greatest-hits-of-2025/Sun, 11 Jan 2026 00:00:00 +0000aaronhsyong2@gmail.com (Aaron Yong)https://site.aaronhsyong.com/posts/top-10-greatest-hits-of-2025/The OWASP Top 10 for 2025, explained with code examples and practical fixesWho Goes Therehttps://site.aaronhsyong.com/posts/who-goes-there/Sun, 14 Dec 2025 00:00:00 +0000aaronhsyong2@gmail.com (Aaron Yong)https://site.aaronhsyong.com/posts/who-goes-there/Sessions, JWTs, OAuth, and SSO — what they are and when to use each