Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
egberts1
on Oct 7, 2020
|
parent
|
context
|
favorite
| on:
DOMPurify bypass: XSS via HTML namespace confusion
All this tracking of string types (encoded or decoded) makes me wonder if we should have separate string type AND strong-typing language for handling of HTML strings.
Join us for
AI Startup School
this June 16-17 in San Francisco!
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
