Instructure confirms hackers used Canvas flaw to deface portals
(bleepingcomputer.com)
1.
2.
The woes of sanitizing SVGs
(news.ycombinator.com)
3.
The Woes of Sanitizing SVGs
(news.ycombinator.com)
4.
Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148
(news.ycombinator.com)
5.
Ukraine arrests suspected admin of XSS Russian hacking forum
(bleepingcomputer.com)