The Curious Engineer

All blogs / Security

random dross

learn.microsoft.com/en-us/archive/blogs/dross

Web security and beyond...

SecurityWeb developmentFrontend / CSS / browsersMicrosoft blogsMSDN archive

’05’10’15’20’25
Posts
37 from 11 Jun 2005 to 4 Aug 2014
Posting
archived, read-only
Kind
personal blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/dross/feed.xml

2014 1

  1. My blog has moved...

2012 2

  1. Hyperlink Spoofing and the Modern Web
  2. Creating XSS

2011 2

  1. XSS Filter Tech: Later is Better?
  2. Enforcing Standards Mode with X-FRAME-OPTIONS

2010 1

  1. Fuzzing for Design Bugs?

2009 9

  1. Happy 10th birthday Cross-Site Scripting!
  2. Current Thoughts on DNS Rebinding
  3. Thoughts on Legacy Character Sets
  4. Good Bug
  5. The MSHTML (Trident) Host Security FAQ
  6. New webappsec tools
  7. IE8 is here!
  8. XSS Filter Improvements in IE8 RC1
  9. Video Roundup (Martin Johns and more!)

2008 9

  1. Abe
  2. Xssds
  3. IE8 Beta 2
  4. IE 8 XSS Filter Architecture / Implementation revealed + some other news
  5. IE8 XSS Filter design philosophy in-depth
  6. IE8 goes on the offensive against XSS!
  7. Lead my team!
  8. XSS-Focused Attack Surface Reduction
  9. The Kill-Bit FAQ - Part 1 of 3 posted to SVRD blog

2007 6

  1. Security Vulnerability Research & Defense blog
  2. MashupOS
  3. An innovative new defense against cross-domain vulnerabilities
  4. Pinning / Rebinding / Quick-Swap DNS Links
  5. Notes on DNS Pinning
  6. Inspect Your Gadget

2006 5

  1. De-obfuscation using a standalone Javascript interpreter
  2. eval() and document.write(), meet Execute and ExecuteGlobal
  3. Recursive Obfuscation
  4. High-bit ASCII obfuscation
  5. Code length dependent obfuscation

2005 2

  1. Analyzing Browser Based Vulnerability Exploitation Incidents
  2. Hello