Simon Willison’s Weblog

Don't serve JSON as text/html. Another sneaky XSS trick.

Posted 5th July 2006 at 11:46 pm

Recent articles

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!