<script> tags follow unintuitive parsing rules that can break a webpage in surprising ways. Fortunately, it’s relatively straightforward to escape JSON for script tags.| sirre.al
My author's writeup of the July 2025 challenge. Perform Mutation XSS to DOM Clobber an change the insertion point into an iframe, then bypass the CSP using a new useful Socket.IO gadget| jorianwoltjer.com
Stumbling into a (slightly) better HTML named character reference tokenization implementation| www.ryanliptak.com
Learn how to structure your HTML documents with a solid foundation.| web.dev
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
The load event is fired when the whole page has loaded, including all dependent resources such as stylesheets, scripts, iframes, and images, except those that are loaded lazily. This is in contrast to DOMContentLoaded, which is fired as soon as the page DOM has been loaded, without waiting for resources to finish loading.| MDN Web Docs
In 1991 Guido van Rossum released the first version of the Python programming language. About that time the world began to witness a major change...| tenthousandmeters.com
HTML| html.spec.whatwg.org
1. Introduction| www.w3.org
HTML| html.spec.whatwg.org
1. Infrastructure| wicg.github.io
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
1. Introduction| www.w3.org
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
Find out what the browser preload scanner is, how it helps performance, and how you can stay out of its way.| web.dev
In this write-up, we’ll delve into how, through differential fuzzing, we uncovered a bug in Go’s exp/net HTML’s tokenizer. We’ll show potential XSS implications of this flaw. Additionally, we’ll outline how Google assessed this finding within their VRP program and guide how to engage and employ fuzzing to evaluate your software. Introduction Reminisce with me the discussion boards of 2005. Open to all, searchable from every corner, with no account needed to peek in.| mionskowski.pl
This specification defines an interface for web applications to access the complete timing information for navigation of a document.| www.w3.org
" [31m"?! ANSI Terminal security in 2023 and finding 10 CVEs| dgl.cx
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
HTML| html.spec.whatwg.org
The history, facts, and opinions.| jakearchibald.com
A personal website of Shuhei Kagawa. I write mostly on web technologies and life.| Shuhei Kagawa
