Simon Willison’s Weblog

XSSed. Cross-site scripting resource and vulnerabilities archive, including reported (unpatched) holes ordered by PageRank.

Posted 29th May 2007 at 10:03 pm

Recent articles

Trying out the new Gemini 2.5 model family - 17th June 2025
The lethal trifecta for AI agents: private data, untrusted content, and external communication - 16th June 2025
An Introduction to Google’s Approach to AI Agent Security - 15th June 2025

pagerank 6 security 526 xss 60

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe