Andres Hernandez

A Andres Hernandez

Export PDF

Home Projects Portfolio Dashboard Export PDF Log in

Languages

English

127

Filtered Posts (Clear all)

XSS

August 03, 2026 0 Astro Security XSS Input Validation Web Development

Hardening the rifasvelez-web Gallery: Protecting Against XSS and Attribute Injection

A recurring challenge in web development is securely integrating external content into dynamic user interfaces. For the rifasvelez-web project, which features an interactive image gallery, this challenge became a focal point when handling metadata from remote Cloudinary JSON fields. The risk? Unsanitized data could lead to dangerous Cross-Site Scripting (XSS) vulnerabilities and attribute injection attacks when rendered into elements like Fancybox captions.

The Threat: DOM XSS and

May 13, 2026 0 Astro Web Security XSS Frontend JavaScript

Hardening Web Galleries: Protecting Against DOM XSS and Attribute Injection in Astro

Web applications are constantly targeted by various security vulnerabilities, and among the most insidious are Cross-Site Scripting (XSS) attacks. Specifically, DOM-based XSS and attribute injection pose significant risks, especially in dynamic content displays like image galleries. We recently focused on enhancing the security of the rifasvelez website's gallery component to safeguard against these threats, ensuring a more robust and secure user experience.

The Silent Threat: DOM XSS and

Andres Hernandez

Product-focused Software Developer specializing in the React ecosystem (Next.js, TypeScript). Proven experience contributing to high-impact open source projects and building scalable web applications. Committed to clean code, UI/UX design principles, and SOLID architecture to solve complex problems.

Technologies

Click to filter by technology.