23 Nov 22

Details of an XSS vulnerability on Amazon.com where snippets of JS inside a book would get executed by the browser when using the “Look Inside the Book” feature.


13 Jan 21

Avatar generator coded in vanilla JavaScript. Only a single library (SHA-256) is used, integrated into the script. The initial character designs in SVG are also integrated into the script. So there is a single dependency-free JavaScript file that has everything in it (minified 68 KB).


27 Dec 19

Injecting an iframe to any production page gives you full capabilities to automate navigation through it, avoiding for example cross-domain blocking issues. Browser’s developer tool gives you big part of all you need to complete a small crawling and scraping project.


21 Jun 16

With Tonic embed your code is automatically connected to every version of every one of the 300,000 library on npm (just require(“library”) or require(“library@version”), its already pre-installed). Additionally, the code is run in an actual container, so you can use filesystem examples, spin up a web server, whatever you’d like.