Wishula Jayathunga·Oct 25The Leaky EnvelopeHow a single missing else branch in an MCP gateway let internal JSON‑RPC protocol data leak straight into backend request bodies and how a…
Gayuthdemika·Oct 12The Valid Token That Crashed Our Tenant FilterHow one companyId claim keeps every customer’s data apart across WSO2 Identity Server, API Manager and .NET 8, and what broke at each hop…
Ramiiyan Sriraguhan·Oct 4Automating WSO2 APIM Data Migration — Treat the Runbook Like Code (With Checkpoints)TL;DR: WSO2 APIM data migration isn’t a one-click upgrade. It’s a multi-step, multi-client, multi-database process — and you’ll probably…
Nadee Poornima·Jun 30Mitigating Clickjacking Vulnerabilities in WSO2 API Manager 3.2.0: A Complete GuideClickjacking is a malicious technique where an attacker tricks a user into clicking on a disguised element of a webpage, potentially…
Dilky Liyanage·Jun 22Investigating High Memory Utilization in a WSO2 API Manager DeploymentImagine you’re monitoring a production WSO2 API Manager deployment and suddenly notice one of your gateway pods sitting at 90% memory…
