EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 26·5 min read
What's in a tag name? JavaScript, apparently
TL;DR
A developer explored the rules for naming HTML tags in JavaScript, discovering that while tag names are converted to uppercase, the 'localName' property retains the original lowercase version. This insight allows for better manipulation of tag names in web development.
✦ Why It Matters
Use the 'localName' property to maintain case sensitivity when manipulating HTML tags in JavaScript.
Key Takeaways
- Investigate how tag names can be manipulated in your applications.
- Implement strict input validation to prevent XSS attacks.
- Review the use of attributes like localName and classList.
- Test your application against various browsers for security vulnerabilities.
How It Works
The author discovered that browsers convert tag names to uppercase but retain a lowercase version in the 'localName' property. By chaining event handlers and manipulating attributes, JavaScript payloads can be executed through unconventional tag names and attributes, creating XSS vectors.