GitHub Repos· Aug 25, 2026· by r000t1ng

r000t1ng/Crash4Browser

Open Original Article ↗
A hundred thousand history.pushState calls in a loop. The tab runs out of memory and the browsing history is left unusable.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#browser-security#denial-of-service#javascript#memory-exhaustion#proof-of-concept#security-research#vulnerability-research