A Andres Hernandez
Home Projects Portfolio Dashboard Export PDF Log in

Languages

English
127

Filtered Posts (Clear all)

Hardening the rifasvelez-web Gallery: Protecting Against XSS and Attribute Injection

A recurring challenge in web development is securely integrating external content into dynamic user interfaces. For the rifasvelez-web project, which features an interactive image gallery, this challenge became a focal point when handling metadata from remote Cloudinary JSON fields. The risk? Unsanitized data could lead to dangerous Cross-Site Scripting (XSS) vulnerabilities and attribute injection attacks when rendered into elements like Fancybox captions.

The Threat: DOM XSS and

Andres Hernandez

Andres Hernandez

Product-focused Software Developer specializing in the React ecosystem (Next.js, TypeScript). Proven experience contributing to high-impact open source projects and building scalable web applications. Committed to clean code, UI/UX design principles, and SOLID architecture to solve complex problems.