Home on Pierre Giustihttps://piergst.github.io/Recent content in Home on Pierre GiustiHugoen-USFri, 24 Apr 2026 11:11:59 +0200Diving into HTML parsing through a PortSwigger labhttps://piergst.github.io/posts/portswigger-lab-html-parsing-dive/Fri, 24 Apr 2026 11:11:59 +0200https://piergst.github.io/posts/portswigger-lab-html-parsing-dive/A PortSwigger lab on dangling markup injection got me wondering what actually happens between the raw HTML a server sends and what a browser displays. This article traces that journey, from a /login that vanished from the DOM to the HTML tokenizer state machine, tree construction, and DOMPurify sanitization. Less of a write-up, more of an exploration of HTML parsing mechanics.<link>https://piergst.github.io/about/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://piergst.github.io/about/</guid><description><h2 id="pierre-giusti">Pierre Giusti</h2> <p>Currently all-in on offsec and bug bounty. Before that, 10+ years as a developer: embedded and CNC-machine work on the industrial side, then desktop and web applications, with a fair amount of devops along the way. I like tech topics, searching, digging, learning, building my own tools.</p> <p>I had another professional life too: timber framing, wooden boatbuilding, log cabins in Canada&hellip; A good few years putting together things that have to stand up, or float. That led me to designing a CNC machine for timber framing. I drew and built the first two prototypes alone, in a workshop; six years later the company was shipping a hundred machines a year.</p></description></item></channel></rss>