Skip to content

Instantly share code, notes, and snippets.

View carvinlo's full-sized avatar

carvin carvinlo

View GitHub Profile
@Snarp
Snarp / superscripts_subscripts_normalized_via_nfkc.yml
Last active March 14, 2025 02:40
Unicode superscripts and subscripts normalized via NFKC
---
:subscripts:
"": '0'
"": '1'
"": '2'
"": '3'
"": '4'
"": '5'
"": '6'
"": '7'
@rudSarkar
rudSarkar / xss-image.svg
Created August 12, 2019 18:28
SVG Image XSS File
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
@wanglf
wanglf / vscode-extension-offline.md
Last active October 31, 2025 12:58
Download VS Code extensions as VSIX

How to use?

  • Copy content of vsix-bookmarklet, create a bookmark in your browser.
  • Navigate to the web page of the VS Code extension you want to install.
  • Click the bookmark you just created, then click the download button.
    download
  • After download finished, rename the file extension to *.vsix.
  • In VS Code, select Install from VSIX... in the extension context menu.
    vsc
@GAKINDUSTRIES
GAKINDUSTRIES / Same origin policy.md
Last active October 8, 2024 09:00
Same origin policy, why is it so important?

Today is time to learn something about same-origin-policy and why it is so important to know when building a website. We will go through iframes too and what measures you have to take into account when using them. Hope you like it :D

What is it ?

The Same-Origin-Policy is an important concept in the web application security model. Under the policy, a web browser permits scripts contained in a first web page to access data in a second web page, but only if both web pages have the same origin. An origin is defined as a combination of URI scheme, hostname, and port number. This policy prevents a malicious script on one page from obtaining access to sensitive data on another web page through that page's Document Object Model.

This is the common definition that we will found on every page. But what really is it. Well, basically Same Origin Policy limits the access of one window to another.

The reason behind that is security. If you have https://GAKINDUSTRIES.com in one window and https://gmail