RRenéindevholster.hashnode.dev·Aug 26 · 5 min readYour HTML is lying about your trackers. Detecting third-party services with a headless browserI built a free privacy policy generator for Austrian websites. The boring part is assembling legal text from building blocks. The interesting part is a feature I call the website scan. You enter a URL01O
RRenéindevholster.hashnode.dev·Aug 20 · 3 min readDie teuerste Zeile HTML: Google Fonts direkt von Google ladenWas am dynamischen Einbinden das Problem ist Beim Laden der Seite holt der Browser das CSS von fonts.googleapis.com und die Schriftdateien von fonts.gstatic.com. Dabei wird zwangsläufig die IP-Adresse00
RRenéindevholster.hashnode.dev·Aug 20 · 5 min readA 20-minute ReDoS audit for a Node API you already shippedEvery regex in your request path is code with a runtime that depends on the input, and unlike the rest of your code, nobody ever asked what its worst case is. That is the whole vulnerability. Not obsc00
