ircmaxell's Blog

Knowledge Base Blogs and News

Pricing: Free

Visit Website ↗

ircmaxell's Blog

What is ircmaxell's Blog

SecurityWeek provides comprehensive cybersecurity news and analysis across various security domains.

Setting Up a Home Network

Last year, my partner and I moved into a new house. One of the first tasks I needed to tackle was setting up our home network, as we both were (and still are) working from home due to COVID-19.

Exploring the Process: Insights and Setup Details

This post will delve into parts of that process, the decisions I made throughout, the lessons I learned, and some specifics about the final setup.

It’s no secret that I’m passionate about building compilers and programming languages

It’s no secret that I’m enthusiastic about creating toy compilers and programming languages. Today, I’m excited to introduce something that I hope is not just a toy. I’m presenting php-compiler, along with several other projects. My aspiration is for these projects to evolve from experimental phases into fully production-ready systems. PHP HHVM Open Source Compiler libjit libgccjit llvm Optimization Performance Recki-CT Protecting Against XSS In RAILS - JavaScript Contexts Recently, my team has been working on integrating Brakeman into our CI processes to automatically scan our codebase for security vulnerabilities. Among various issues detected, it highlighted several similar XSS vulnerabilities that follow a common pattern: <script type="text/javascript"> var FOO = "<%= raw whatever %>"; ReactDOM.render(<Blah foo={window.FOO} />, document.getElementById('some_place')); </script>

Understanding the Vulnerability of Untrusted Data in JavaScript

This is a straightforward vulnerability, as passing untrusted data into a JavaScript context can result in Cross-Site Scripting (XSS) attacks.

ircmaxell's Blog Reviews

No reviews yet.

Similar Tools

Free
Blogs and News

OWASP News

Sysreptor offers a customizable security reporting solution for penetration testers and red teamers.

Free
Blogs and News

The CyberWire

The CyberWire is your essential partner for navigating the complex and rapidly evolving cybersecurity landscape. We deliver concise, actionable intelligence to ensure you maintain critical situational awareness and achieve continuous professional development. By rigorously separating vital information from noise, we empower global leaders and professionals across public and private sectors to stay ahead of emerging threats and trends.

Real-time cyber threat intelligenceExpert analysis and insightsSituational awareness reporting
Free
Blogs and News

Security Magazine

Security Magazine serves as the premier business publication for security executives, delivering in-depth coverage of management challenges and innovative solutions spanning both physical and cyber realms. It is dedicated to providing enterprise security leaders with actionable insights, management-focused features, expert opinions, and trend analysis crucial for navigating complex risks in business, government, and institutional sectors. With a comprehensive approach available in print, online, and through in-person events, Security Magazine empowers leaders to make informed decisions and implement effective security strategies.

Management-focused articles for security executivesCoverage of both physical and cyber security issuesAnalysis of effective security solutions
Free
Blogs and News

IT Security Guru

IT Security Guru serves as your definitive daily source for breaking news, expert interviews, and in-depth analysis across the cybersecurity landscape. Stay informed on critical topics like ransomware, cybercrime, and privacy through curated content, including editor-selected top stories and exclusive video features. We provide comprehensive coverage of upcoming events and insightful product reviews to keep you ahead of evolving digital threats.

Daily breaking news in IT securityInterviews with leading IT security thinkersExclusive video content
Free
Blogs and News

InfoSecurity Magazine

Infosecurity Magazine is a leading global authority delivering over a decade of award-winning editorial content, offering deep insights into the information security industry. Through comprehensive online and print publications, webinars, virtual conferences, and educational resources endorsed by major accreditation bodies, it serves as an indispensable learning resource for cybersecurity professionals. The platform also features an extensive Supplier Directory, connecting businesses with over 8,000 specialist cyber security service providers worldwide.

Award-winning online and print editorial contentIn-depth news analysis and expert opinion columnsExtensive educational resources including webinars and virtual conferences
Free
Blogs and News

Help Net Security

Since 1998, Help Net Security has been a leading platform for comprehensive cybersecurity news, analysis, and expert insights. We offer in-depth coverage extending beyond breaking news to address technical challenges, management strategies, and critical concerns relevant to all organizational departments. Our content is curated by industry leaders with extensive practical experience, delivering seasoned advice and thought leadership to a global audience.

Extensive cybersecurity news archive since 1998In-depth analysis of technical and management issuesExpert insights from industry leaders and practitioners

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by