761 reputation
314
bio website robwu.nl
location The Netherlands
age 20
visits member for 1 year, 3 months
seen 2 days ago

I'm a CS student who likes web-related technologies, in particular browser extensions. I'm the creator of Lyrics Here by Rob W and several Stack apps.

I'm quite active on Stack Overflow, and occasionally put something on Github.

Contact: gwnRob@gmail.com


Jul
6
comment Google Chrome Crash Report Analysis
When I find a crash in Chrome, I usually try to check whether it is reproducible, and if it is, run it in gdb. Have you already read chromium.org/developers/crash-reports and chromium.org/developers/decoding-crash-dumps?
Jul
6
comment Google Chrome Crash Report Analysis
Is the crash reproducible?
May
31
revised What can entreprise admins do with our secured sessions?
Fixed capitalization and grammar
May
31
suggested suggested edit on What can entreprise admins do with our secured sessions?
May
9
comment Is there a safe way to open a possibly spam facebook attachment?
Which web browser were you using? What extension was installed?
Apr
11
revised browser-extensions wiki description
deleted 3 characters in body
Apr
11
suggested suggested edit on browser-extensions tag wiki
Apr
8
awarded  Yearling
Mar
28
comment Free SSL Certificate when encryption is needed and not trust?
+1 for StartSSL. Their SSL certificates are free for noncommercial use, otherwise you have to pay a reasonably small fee (individuals: 60$ to validate identity, after that you can get a certificate that's valid for two years; twice as much if you want to get the cert for a company). For this fee, you will among other things wildcard certificates and code signing. Their customer service is also very responsive. The website may seem odd at first, but it's easy to get used to it.
Mar
23
revised Are official browser add-ons really safe?
Mention IE extension gallery, remove case analysis for the Chrome extension (because its public source code has been updated)
Mar
8
comment Should Access-Control-Allow-Origin need to be domain specific
Wildcard domains are invalid, see stackoverflow.com/questions/14003332/…
Mar
7
comment What is the security flaw in the following code?
Since the magic is in the query string, it will also be visible to other websites via the HTTP referrer.
Mar
4
comment Is Adblock (Plus) a security risk?
@itcouldevenbeaboat See answers and linked answers at stackoverflow.com/q/9515704
Mar
4
comment Is Adblock (Plus) a security risk?
@itcouldevenbeaboat Content scripts are not run in a virtual machine. The JavaScript execution contexts are indeed separated, but the DOM is shared. Consequently, content scripts can run code in the context of the web page by inserting script tags, running event handlers, etc.
Mar
2
revised Do Chrome/browser extensions break the tab sandbox?
added 100 characters in body
Mar
2
revised Do Chrome/browser extensions break the tab sandbox?
Removed non-relevant intro, added chrome tag.
Mar
2
suggested suggested edit on Do Chrome/browser extensions break the tab sandbox?
Feb
28
comment Is Adblock (Plus) a security risk?
"open-source" means nothing if the source you're looking at is not the same source as the extension uses. I have published the Chrome extension source viewer that allows one to view the real source of an extension (= the one that is going to be used when you install an extension). Of course, you have to trust that the extension does what it promises, i.e. display correct source code instead of some censored one. It all boils down to "only install software from publishers you trust").
Feb
28
answered Do Chrome/browser extensions break the tab sandbox?
Feb
5
comment Is it safe to use createHTMLDocument to sanitize HTML?
@MattiasWadman If you don't mind loosing lots of potentially dangerous tags and attributes, you could also try the global toStaticHTML method in IE 8 + 9.