Blog

2015-04

• A bug in the Sundown and Redcarpet markdown parsers may lead to XSS

2015-03

• XSS via a spoofed React element

2015-02

• HackerOne's First XSS

2014-02

• Hacking stackoverflow.com's HTML Sanitizer
• Stack Overflow in 4096 bytes
• Trello in 4096 bytes