1. Basic Information Article Title: What's in a tag name? JavaScript,...
1. Basic Information
Article Title: What's in a tag name? JavaScript, apparently
Published By: PortSwigger Research
Publication Date: 2026-08-25 14:24 UTC
Original Source: PortSwigger Research
Mahdi Shamlou here. Mahdi, okay fine — you got me with NoSQL injection last time ( read that story...
Firefox 148 shipped Trusted Types in February 2026, making it Baseline. Here's how to turn every dangerous innerHTML assignment…
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API…
I built xss-labs, a free, open-source collection of 39 interactive XSS challenges. It runs entirely...
A senior-level breakdown of Angular's sanitization pipeline, the Safe* types, when bypassSecurityTrustHtml() is actually…
What I Fixed A Cross-Site Scripting (XSS) vulnerability in cyberbro (122 ⭐), an...
