Posts on javascript

The Browser's Dark Alleys: DOM-Based XSS and the 'It Won't Happen to Me' Delusion

We've spent years hardening our servers, but the battlefield has shifted to the client-side. Let's dive into why your modern SPA might be more vulnerable than you think, focusing on the subtle danger of DOM-based XSS.