Security / Explainer
Your feed parser is a trust boundary
Receiving a document is not permission to expand everything inside it.
Article date · 3 min read
Published on TLB Sources checked
Analysis, explainers, practical guides and labs. One original-content library.
Receiving a document is not permission to expand everything inside it.
Two similar-looking directives answer different questions.
Follow one request from a human-readable address to the page on your screen.