Mitigating DOM clobbering attacks in JavaScript

Addressing JavaScript Cryptography Security Challenges Through Web Auditability

This article examines the fundamental security challenges with JavaScript cryptography on the web, particularly the problem of code distribu

The Evolution and Challenges of HTML and the DOM in Modern Web Development

The article discusses the evolving nature of HTML and the DOM, highlighting the increasing complexity and legacy issues within web developme

WAF - WAF Release - 2025-07-14

The Browser as a Sandbox: Exploring the Shift in Software Execution and Security

The article explores the paradigm shift in how software is built and run, focusing on the browser as a sandboxed execution environment for u

Analyzing JavaScriptCore Vulnerabilities: Developing CodeQL Queries for Security Research

This technical blog post explores JavaScriptCore (JSC), the JavaScript engine used by Safari and other macOS applications. The article provi

Understanding Shadow DOM in the Web Components Ecosystem

Russell Beswick explains how Shadow DOM fits into the broader Web Components ecosystem alongside Custom Elements and HTML Templates. The art