Omise Developer Blog

Insights on payments, APIs, security, and fintech from the team building Southeast Asia's most trusted payment gateway.

Developers

Building a Seamless Checkout Experience with the Omise API

Learn how to integrate Omise's payment gateway into your web application in under 30 minutes. We cover tokenization, 3-D Secure, and error handling.

Natthawut K. · Feb 28, 2019 · 8 min read

APIIntegrationPHP

Interviews

Interview: How Pomelo Fashion Scaled Payments Across Southeast Asia

We sat down with Pomelo's CTO to discuss how they handled multi-currency transactions, fraud prevention, and peak load during flash sales.

Salinee T. · Mar 1, 2019 · 12 min read

InterviewCase StudyE-commerce

Developers

Omise.js 3.0 — What's New for Developers

Omise.js 3.0 ships with a redesigned token form, better mobile UX, TypeScript definitions, and a new customizable UI library for card input fields.

Frederico A. · Feb 20, 2019 · 6 min read

JavaScriptReleaseSDK

← Prev 1 2 Next →

Lab 302 — Attack Payloads

The server router reads REQUEST_URI, strips /302.php, and passes the rest to header("Location:").

Normal URL (safe):

302.php?category=interview&page=2

⚠ Attack — external domain in PATH:

How: ////bing.com/ in Location header → browser normalises → //bing.com/ (protocol-relative) → external redirect

📄 HackerOne #504751 · Omise · $100 · Low 3.3