Notices by Ben Kelly (wanderview@toot.cafe)

Interesting read on the current state of cross-origin attacks and mitigations in browsers: https://www.arturjanc.com/cross-origin-infoleaks.pdf

URL parsing and handling is finally threadsafe in gecko! I've wanted this for this for as long as I've been on the project. https://groups.google.com/d/msg/mozilla.dev.platform/zQiBvXzGtEs/M9RlL9fIAwAJ

Does anyone have a good list of web platform (engine or spec) folks on Mastodon?

Mozilla is experimenting with blocking in-page "popup" overlays. If you want to help, consider installing one of these addons to help us build our block list:

Firefox: https://addons.mozilla.org/en-US/firefox/addon/in-page-pop-up-reporter/

Chrome: https://chrome.google.com/webstore/detail/in-page-pop-up-reporter/dkpphegmeomaffjanagefmejpeebfcmh