Live data from Hacker News

Viewing profile — leenify

leenify

HN member
Joined
Fri, Apr 25, 2025, 11:32 AM UTC
HN karma
23
Public activity
7 items

About leenify

Web Security Researcher at TU Braunschweig.

I work on Project Foxhound and care about how to sanitize HTML properly.

Recent public activity

  1. comment
    Comment #45681951

    As the stuff is rendered on the front-end how do you deal with tags where you do not even have the information to decide how they shall be parsed on the server? This seems rather i…

  2. comment
    Comment #45681848

    Thank you for the effort to bring this to life together with Freddy!

  3. comment
    Comment #45681623

    Are you certain that this is secure? What about parsing depth/DOM clobbering, etc? See https://mizu.re/post/exploring-the-dompurify-library-bypasse... for an example of why this is…

  4. comment
    Comment #45370355

    I'm somewhat uncertain personally about the future of Mozilla myself, as well as compatibility issues and a lack of mindshare. Also, I feel working with the Chromium codebase is ea…

  5. comment
    Comment #45369917

    > The real problems with Gecko is just that it’s harder to fork That goes contrary to my experience. I'm a maintainer of a Firefox fork (with rather extensive changes to a lot of t…

  6. comment
    Comment #44375979

    Hmm, is that really true? I spoke at BH last year and was not required to submit a paper. And based on the briefings link, there surely isn't a paper link, only slides and tool.

  7. comment
    Comment #43792555

    That can work, but it can also bring quite a few issues. Mozilla effectively does this; their build process downloads the build toolchain, including a specific clang version, durin…