Jun

cursed_types. List of Trusted Types bypasses

PNaCl_Leaker. Simple PoC to leak contents from embedded origin

spoof.js. WinDbg script to spoof origin and url of a renderer process in Chrome

Safe-Blob-URL. A Web Platform API proposal for Blob URL

shhnjk.github.io. HTML

allow-unique-origin. New keyword for iframe/CSP sandbox

as-sec. WebAssembly

dysw.js. Dynamic SW response via passed Parameters