0.0.0.0 Day: Exploiting Localhost APIs From the Browser | Oligo Security
Oligo Security's research team recently disclosed the “0.0.0.0 Day” vulnerability. This vulnerability allows malicious websites to bypass browser security and interact with services running on an organization’s local network, potentially leading to unauthorized access and remote code execution on local services by attackers outside the network. The issue stems from the inconsistent implementation
当ポストはGo Advent Calendar 2019の5日目の記事です。基本ポエムを書いていて技術記事を書く感覚が鈍っていますが頑張ります。 今回はGoでheadless browser（Chrome）を用いた、動的な画像生成を行うというテーマで書きたいと思います。 なぜ画像生成したいのか？人はなぜ画像を生成したくなるのでしょうか？僕は漫然と画像を生成するのは、時間に限りがある身としてはよくないな、と思います。ということで理由が必要なのですが、最たる例はOGP画像の生成とかじゃないでしょうか？ あるいは任意のLGTM画像を生成したくて、文字を画像にかぶせたり、インスタグラムVer1.1みたいなサービスをローンチしたい時に、フィルター加工を実装したかったりするかもしれません。 Goで画像生成するには？Goで画像生成する方法に関してはこの１、２年でpo3rinさんや僕がしばしば登壇して解説
Face and hand tracking in the browser with MediaPipe and TensorFlow.js
Posted by Ann Yuan and Andrey Vakunov, Software Engineers at Google Today we’re excited to release two new packages: facemesh and handpose for tracking key landmarks on faces and hands respectively. This release has been a collaborative effort between the MediaPipe and TensorFlow.js teams within Google Research. Try the demos live in your browserThe facemesh package finds facial boundaries and lan
This tool runs entirely in your browser. No files are uploaded to a server. It uses Tesseract.js for OCR and PDF.js to convert PDFs into images. Language: Drag and drop a PDF, JPG, PNG, or GIF file here or click to select a file
GitHub - mizchi/uniroll: Opinionated universal frontend bundler in browser
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - gajananpp/puppeteer-ide-extension: Standalone puppeteer playground in browser's developer tools.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
TypeScript Compiler APIとmdn-browser-compat-dataとbrowserslistを使ってサポートされていない呼び出しを見つける - hitode909の日記
IE11で動かしたいコードでelement.prepend()してたら怒ってほしい ライブラリを使っていたらブラウザ間の差異を気にする必要があまりないけど、最近開発しているプロダクトではDOMのAPIを直接触っているので、このメソッドIEにもあるんだっけ、呼んでいいんだっけ、というのをレビューで確認したりしていて苦労していた。 過去にうっかり呼んでしまったメソッドについてはpolyfillが入っていたりして、appendのpolyfillは入ってるけどprependのpolyfillは入っていないためにIE11でエラーになる、ということが起き得る。 ブラウザ間の差異をlintしてくれるグッズとして、eslint-plugin-compatというeslint pluginがあって、fetch使えませんよ、とか発見してエラーとして報告してくれる。 便利なのだけど、たとえばelement.pre
Cross-browser tracking vulnerability in Tor, Safari, Chrome, and Firefox
Cross-browser tracking vulnerability in Tor, Safari, Chrome, and Firefox
GitHub - dolanmiu/docx: Easily generate and modify .docx files with JS/TS with a nice declarative API. Works for Node and on the Browser.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Floorp Browser
By default, Floorp includes a robust tracking blocker, protecting users from a variety of malicious trackers lurking on the web. Additionally, it provides fingerprinting protection.
GitHub - estie-inc/wasm-xlsxwriter: Generate Excel files in-browser with WebAssembly.
import xlsxInit, { Format, FormatAlign, FormatBorder, Formula, Workbook, Image, Url, } from "wasm-xlsxwriter"; // Load the WebAssembly module and initialize the library. await xlsxInit(); // Create a new Excel file object. const workbook = new Workbook(); // Create some formats to use in the worksheet. const boldFormat = new Format().setBold(); const decimalFormat = new Format().setNumFormat("0.00
Cookie Status :: Current Status Of Browser Tracking Prevention | cookiestatus.com
Cookie Status The cookiestatus.com website is a knowledge sharing resource for the various tracking protection mechanisms implemented by the major browsers and browser engines. For more information about the service, please consult the FAQ. Please submit suggestions and corrections as issues in the GitHub project. Click here to find your way. Changes added in the latest release of each browser are
無料のプライバシー重視のブラウザ「Mullvad Browser」が登場、VPNとTorの提携により追跡に使用されるユーザーの「指紋」を減らして匿名性をアップ
スウェーデンのVPNサービスであるMullvadと、匿名通信プロトコル「Tor」を手がけるTor Projectが2023年4月3日に、「Mullvad Browser」のリリースを共同発表しました。MullvadとTor Projectは、「Mullvad Browser」を使用して、指紋採取のように個人情報を集めるフィンガープリントでの追跡を困難にすることで、ブラウジングのプライバシーがより一層高まるとしています。 Free the internet from mass surveillance. With the Mullvad Browser. https://mullvad.net/en/browser MULLVAD VPN AND THE TOR PROJECT TEAM UP TO RELEASE THE MULLVAD BROWSER. - Blog | Mullvad
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
GitHub - syscolabs/kasaya: A "WYSIWYG" (sort of) scripting language and runtime for browser automation
Kasaya (beta) A "WYSIWYG" (well, kind of) scripting language and runtime for browser automation Write test scripts using English-like statements. NO coding required to implement those statements. Not dependent on HTML IDs or XPaths. Write the same way you would instruct another human being sitting in front of the browser. NOT like Cucumber. NOT like Selenium IDE. You can: Do your initial dev test
Microsoft Edge (及び Chromium 系 Browser 全般) v124 から Office 系ファイルの DL に制限がかかる件について - Qiita
Microsoft Edge (及び Chromium 系 Browser 全般) v124 から Office 系ファイルの DL に制限がかかる件についてChromeEdgeChromium これは何？ Microsoft Edge v124 に更新後、下記画像のように "XXX を安全にダウンロードすることはできません" と表示され、 Office 系のファイル等にてダウンロードに失敗する事象の理由と解決策です。 なお、先立ちますがこの動作は Chromium の仕様変更による想定の挙動です。 2024/05/01 追記 リリースノートに下記が追記されました。 元の動作に一時的に戻っていますが、v127 で再度警告表示されるようになります。 今のうちから対処 (https 化) することをお勧めします。 2024/06/04 追記 5/9 付で再警告表示への切り戻しが v127 →
Deno is a Browser for Code
I started contributing to Deno soon after Ry made the prototype visible in May 2018. The most frequent question that people have is "where is the package manager?" which often times isn't even in the form of a question. It is statements like "I thought Deno took security seriously, and just downloading resources off the internet is insecure." or "How can I possibly manage my dependencies?" In my o
Cloudflare Workers Browser Rendering API を使ってスクリーンショットを R2 に保存する - Qiita
Cloudflare Workers Browser Rendering API を使ってスクリーンショットを R2 に保存するcloudflareCloudflareWorkers Workers Browser Rendering API とは Automate an isolated browser instance with just a few lines of code This is why we’re excited to announce a private beta of the Workers Browser Rendering API, improving the browser automation experience for developers. With browser automation, you can programmatically do any
GitHub - GoogleChromeLabs/browser-fs-access: File System Access API with legacy fallback in the browser
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - contrastio/recorder: 📹 Recorder | Open-source web app to record screen and camera directly in your browser | No installation required | No tracking | Fully local | 🚀
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - nsfw-filter/nsfw-filter: A free, open source, and privacy-focused browser extension to block “not safe for work” content built using TypeScript and TensorFlow.js.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Learn Playwright & Puppeteer - Browser Automation Frameworks
Tips, tricks, and in-depth guides from the trenches. Learn how to use the popular open-source browser automation frameworks, Playwright and Puppeteer. This guide provides detailed information and examples how you can write high-quality scripts for testing and synthetic monitoring. Getting Started Have a look at how Playwright & Puppeteer work, what similarities they share, as well as the noticeabl
Notion engineers sped up Notion's browser speed with WASM SQLite
Three years ago we successfully sped up the Notion app for Mac and Windows by using a SQLite database to cache data on the client. We also use this SQLite caching in our native mobile application. This year we’ve been able to deliver this same improvement to users who access Notion through their web browsers. This article is a deep dive into how we used the WebAssembly (WASM) implementation of sql
This post describes the Ladybird browser, based on the LibWeb and LibJS engines from SerenityOS. Since starting the SerenityOS project in 2018, my goal has been “to build a complete desktop operating system to eventually use as my daily driver”. What started as a little therapy project for myself has blossomed into a huge OSS community with hundreds of people working on it all over the world. We’v
Microsoft Edge vs. Google Chrome: Which Is the Best Browser in 2021?
Ever since the release of Google Chrome in 2008, it quickly became an industry standard. When Microsoft Edge was released alongside Windows 10 in 2015, Microsoft hoped that users would finally look back towards their native browser. Fortunately for Google, Microsoft Edge failed to dent Chrome’s status as the best web browser for Windows 10. An Edge vs. Chrome debate would have been ridiculous a fe
Local PDF ToolsLocal PDF is a powerful PDF editing tool that uses WebAssembly technology to enable seamless editing directly in your web browser. With our platform, you can merge PDFs, optimize PDFs, and extract valuable information, such as images, from PDF files. Best of all, your files remain secure and confidential as they will not leave your system or be sent to another server. Trust Local PD
オープンソースに関心がある人々は、なぜ Vivaldi ブラウザはオープンソースでないのか、その理由をよく尋ねてきます。この記事では Vivaldi ブラウザとオープンソースの関係を少し掘り下げて説明していきます。 多くの人にとって、オープンソースライセンスの下で Vivaldi ブラウザのソースコードをリリースすることの問題点は明確であることと思います。 Vivaldi は無料で提供されており、検索やパートナーとの取引から収益を得ているため、外部の人々がソースコードにアクセスし支援できる仕組みは Vivaldi にとってメリットになるはずですよね？ Vivaldi はこの観点について様々な見解を有していますが、オープンソースソフトウェアを使用している一支持者でもあるため、社内で定期的に議論されているトピックでもあります。 ただし他のトピックと同様に、このトピックもいざ掘り下げて見ていくと
You can draw with your mouse or finger on any device: laptop, smartphone, tablet, etc. Styluses (includes Apple Pencil) are also supported. You can share your drawing by sending URL. In addition, multiple people can draw together at the same time.
GitHub - dessant/web-archives: Browser extension for viewing archived and cached versions of web pages, available for Chrome, Edge and Safari
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
WebVM 2.0: A complete Linux Desktop Environment in the browser via WebAssembly
Back to blog WebVM 2.0: A complete Linux Desktop Environment in the browser via WebAssembly WebVM is a full Linux environment running in the browser, client-side. It is a complete virtual machine, with support for persistent data storage, networking and, as of today’s release, Xorg and complete desktop environments. In an instance of WebVM, everything executes locally within the browser sandbox. W
GitHub - capricorn86/happy-dom: A JavaScript implementation of a web browser without its graphical user interface
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - imgly/background-removal-js: Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - zthxxx/react-dev-inspector: jump to local IDE code directly from browser React component by just a simple click
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
The Workers Browser Rendering API allows developers to programmatically control and interact with a headless browser instance and create automation flows for their applications and products. Since the private beta announcement, based on the feedback we've been receiving and our own roadmap, the team has been working on the developer experience and improving the platform architecture for the best p
When we think about browsing the internet, we often ignore the browser itself. Instead, we think about all the things we do online—the articles we read, the emails we send, the shows we watch. The software that enables it all, the browser, is so ubiquitous that it’s ignored. Despite the ways our internet use has evolved, the browser has remained relatively unchanged. While all of our other softwar
GitHub - tsmodule/tsmodule: Create standardized TypeScript ESM packages for Node or browser.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - brython-dev/brython: Brython (Browser Python) is an implementation of Python 3 running in the browser
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - zachleat/browser-window: Used in demos as a way to fake a Safari-esque web browser window.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.
Microsoft Releases Playwright Cross-Browser End-to-End Test Runner
InfoQ Software Architects' Newsletter A monthly overview of things you need to know as an architect or aspiring architect. View an example
GitHub - niespodd/browser-fingerprinting: Analysis of Bot Protection systems with available countermeasures 🚿. How to defeat anti-bot system 👻 and get around browser fingerprinting scripts 🕵️♂️ when scraping the web?
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Goでheadless browserを用いた動的画像生成｜Seiji Takahashi@ベースマキナ
OCR PDFs and images directly in your browser
How I used GitHub Copilot to build a browser extension
Ladybird: A new cross-platform browser project
Local PDF - Your Free PDF Editor in the Browser
Vivaldi ブラウザとオープンソース | Vivaldi Browser
Kakeru: drawing app on browser
Workers Browser Rendering API enters open beta
The Browser Company | Building Arc