Dirk Raeder

If the injected style is able to break out of its context, it can do all kinds of bad stuff. There's a neat introduction to mutational XSS here: https://www.youtube.com/watch?v=lG7U3fuNw3A So,...

While checking some alternative frameworks, I found that many components use dynamically calculated values for the `style` attribute. This is true for Angular as well. Two examples I've got at...

Same when logging in to Gnome via gdm and then opening a terminal. With direct login via TTY, nix and nix-installed programms are present.