Frederik Braun frederikbraun.de

Multiple things can be true at the same time

frederikbraun.de·4w·Lobsters, Hacker News

Composing Sanitizer configurations

frederikbraun.de·10w

Perfect types with `setHTML()`

frederikbraun.de·10w·Lobsters, Hacker News

Why the Sanitizer API is just setHTML()

frederikbraun.de·23w

The C3PO Bug in Lego Star Wars: The Complete Saga

frederikbraun.de·23w

With Carrots & Sticks - Can the browser handle web security?

frederikbraun.de·57w·Lobsters, Hacker News, r/programming

Home Assistant can not be secured for internet access

frederikbraun.de·74w·Lobsters, Hacker News

Modern solutions against cross-site attacks

frederikbraun.de·77w·Lobsters, Hacker News

Prompt Injections and a demo

frederikbraun.de·87w

The Mozilla Monument in San Francisco

frederikbraun.de·76w·Hacker News

How I got a new domain name

frederikbraun.de·100w

What is mixed content?

frederikbraun.de·100w

How Firefox gives special permissions to some domains

frederikbraun.de·119w

Examine Firefox Inter-Process Communication using JavaScript in 2023

frederikbraun.de·161w

Origins, Sites and other Terminologies

frederikbraun.de·174w

Finding and Fixing DOM-based XSS with Static Analysis

frederikbraun.de·176w

DOM Clobbering

frederikbraun.de·179w

Neue Methoden für Cross-Origin Isolation: Resource, Opener & Embedding Policies mit COOP, COEP, CORP und CORB

frederikbraun.de·184w

Reference Sheet for Principals in Mozilla Code

frederikbraun.de·302w

Hardening Firefox against Injection Attacks – The Technical Details

frederikbraun.de·306w

Log in to enable infinite scrolling