Sebastion
←All topics

javascript

3 pieces of writing

MarSeventh/CloudFlare-ImgBed PR #625 blocked SSRF in fetchRes
vulnerability8 min read

MarSeventh/CloudFlare-ImgBed PR #625 blocked SSRF in fetchRes

MarSeventh/CloudFlare-ImgBed exposed an authenticated server-side URL proxy through fetchRes. PR #625 adds URL validation, private address blocking and redirect revalidation.

maboloshi/github-chinese PR #692 fixed DOM XSS in translation results
vulnerability8 min read

maboloshi/github-chinese PR #692 fixed DOM XSS in translation results

vm2, NodeVM and Ollama show why JavaScript runtime isolation keeps failing at 300,000 deployments
vm212 min read

vm2, NodeVM and Ollama show why JavaScript runtime isolation keeps failing at 300,000 deployments