Viewing profile — leenify
leenify
HN member- Joined
- Fri, Apr 25, 2025, 11:32 AM UTC
- HN karma
- 23
- Public activity
- 7 items
- HN profile
- View on Hacker News ↗
About leenify
I work on Project Foxhound and care about how to sanitize HTML properly.
Recent public activity
-
comment
Comment #45681951
As the stuff is rendered on the front-end how do you deal with tags where you do not even have the information to decide how they shall be parsed on the server? This seems rather i…
-
comment
Comment #45681848
Thank you for the effort to bring this to life together with Freddy!
-
comment
Comment #45681623
Are you certain that this is secure? What about parsing depth/DOM clobbering, etc? See https://mizu.re/post/exploring-the-dompurify-library-bypasse... for an example of why this is…
-
comment
Comment #45370355
I'm somewhat uncertain personally about the future of Mozilla myself, as well as compatibility issues and a lack of mindshare. Also, I feel working with the Chromium codebase is ea…
-
comment
Comment #45369917
> The real problems with Gecko is just that it’s harder to fork That goes contrary to my experience. I'm a maintainer of a Firefox fork (with rather extensive changes to a lot of t…
-
comment
Comment #44375979
Hmm, is that really true? I spoke at BH last year and was not required to submit a paper. And based on the briefings link, there surely isn't a paper link, only slides and tool.
-
comment
Comment #43792555
That can work, but it can also bring quite a few issues. Mozilla effectively does this; their build process downloads the build toolchain, including a specific clang version, durin…