XSS
appsec.fyi
The WAF Blocked My XSS — So I Rotated What It Was Reading
2026-08-26
What's in a tag name? JavaScript, apparently
2026-08-26
DOM Purify - dirty namespace bypass
2026-08-17
Make Self-XSS Great Again
2026-08-17
[tl;dr sec] #341 - Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements
2026-08-14
More XSS →