sirdarckcat

Note : This (and every post in this blog) is a personal blog post which expresses my personal opinion, and doesn't necessarily have to b...

TL;DR - Any website that uses jQuery Mobile and has an open redirect is now vulnerable to XSS - and there's nothing you can do about it...

TL;DR : Here's a proposal for a new way to fight Cross-Site Scripting vulnerabilities called  Isolated Scripts . You have an open-source...

Summary : This past weekend I spent some time implementing a prototype for a web security mitigation, and I also spent some time thinking w...

TL;DR  - CSP nonces aren't as effective as they seem to be against DOM XSS. You can bypass them in several ways. We don't know how ...

What is the right price for a security vulnerability? TL;DR: Vendors should focus on vulnerabilities, not on exploits. Vulnerabilities sho...

Imagine a world where you, a security researcher, could make money on your open source contributions, and your expertise about the security ...