759 reputation
314
bio website robwu.nl
location The Netherlands
age 20
visits member for 1 year
seen 4 hours ago

I'm a CS student who likes web-related technologies, in particular browser extensions. I'm the creator of Lyrics Here by Rob W and several Stack apps.

I'm quite active on Stack Overflow, and occasionally put something on Github.

Contact: gwnRob@gmail.com


Apr
11
revised browser-extensions wiki description
deleted 3 characters in body
Apr
11
suggested suggested edit on browser-extensions tag wiki
Apr
8
awarded  Yearling
Mar
28
comment Free SSL Certificate when encryption is needed and not trust?
+1 for StartSSL. Their SSL certificates are free for noncommercial use, otherwise you have to pay a reasonably small fee (individuals: 60$ to validate identity, after that you can get a certificate that's valid for two years; twice as much if you want to get the cert for a company). For this fee, you will among other things wildcard certificates and code signing. Their customer service is also very responsive. The website may seem odd at first, but it's easy to get used to it.
Mar
23
revised Are official browser add-ons really safe?
Mention IE extension gallery, remove case analysis for the Chrome extension (because its public source code has been updated)
Mar
8
comment Should Access-Control-Allow-Origin need to be domain specific
Wildcard domains are invalid, see stackoverflow.com/questions/14003332/…
Mar
7
comment What is the security flaw in the following code?
Since the magic is in the query string, it will also be visible to other websites via the HTTP referrer.
Mar
4
comment Is Adblock (Plus) a security risk?
@itcouldevenbeaboat See answers and linked answers at stackoverflow.com/q/9515704
Mar
4
comment Is Adblock (Plus) a security risk?
@itcouldevenbeaboat Content scripts are not run in a virtual machine. The JavaScript execution contexts are indeed separated, but the DOM is shared. Consequently, content scripts can run code in the context of the web page by inserting script tags, running event handlers, etc.
Mar
2
revised Do Chrome/browser extensions break the tab sandbox?
added 100 characters in body
Mar
2
revised Do Chrome/browser extensions break the tab sandbox?
Removed non-relevant intro, added chrome tag.
Mar
2
suggested suggested edit on Do Chrome/browser extensions break the tab sandbox?
Feb
28
comment Is Adblock (Plus) a security risk?
"open-source" means nothing if the source you're looking at is not the same source as the extension uses. I have published the Chrome extension source viewer that allows one to view the real source of an extension (= the one that is going to be used when you install an extension). Of course, you have to trust that the extension does what it promises, i.e. display correct source code instead of some censored one. It all boils down to "only install software from publishers you trust").
Feb
28
answered Do Chrome/browser extensions break the tab sandbox?
Feb
5
comment Is it safe to use createHTMLDocument to sanitize HTML?
@MattiasWadman If you don't mind loosing lots of potentially dangerous tags and attributes, you could also try the global toStaticHTML method in IE 8 + 9.
Feb
5
answered Is it safe to use createHTMLDocument to sanitize HTML?
Jan
22
awarded  Enthusiast
Jan
21
revised Cryptography - Perfect Secrecy
Revert vandalizing changes, because the new question is toooo broad and invalidates the existing answer.
Jan
21
suggested suggested edit on Cryptography - Perfect Secrecy
Jan
18
revised How many security holes were discovered in the original version of Windows XP?
Fix typo, edit alt text to something more useful.