2026-10-25
h4fan security
blog about security, tech
2026-10-16
CSP Nonce closed the door with the window open
CSP Nonce closed the door of XSS. But it leaves the window open. Just don’t give up.
阅读全文 →
2026-10-09
The end of XSS
AI found a XSS by reviewing the javascript code. But CSP blocked it. And this may be the end of XSS.
阅读全文 →
2026-09-28
2026-09-28
intigriti challenge 0826 2026 thoughts
If you don’t know the tricks, you won’t find the answers.
阅读全文 →
2026-09-18