Category: Security

Today, I found out about a very weird interaction that varies across modern browsers. Shadow-DOM is used to obscure elements from the parent context. See the example below for what it actually does This also means that an <iframe> inside…

Special cases when using <iframe> Compare the three cases below by examining each of their window.location.origin and window.origin . You will notice that it is possible for window.origin and window.location.origin to be null. In some cases, one could be null…