Skip to content
View 12joan's full-sized avatar
28 followers · 8 following

Organizations

@anderbellstudios

Block or report 12joan

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
12joan/README.md

Hi there 👋

I'm Joe Anderson, a front-end web developer specialising in rich-text editing and user interface design.

My projects

Pop Pixie / anderbell.studio / Top-down, story-driven shooter. Early access coming soon. / anderbellstudios/pop-pixie Triangles / playtriangles.com / A strategic Tic-Tac-Toe variant for up to 3 players / anderbellstudios/triangles

I frequently contribute to the Slate editor framework.

BSc Computer Science, University of Warwick

Pinned Loading

  1. anderbellstudios/pop-pixie anderbellstudios/pop-pixie Public

    Infiltrate the Mentoes Tower, avenge the death of your father, and bring Mr Mentoe’s dark secrets to light in this top-down, story-driven shooter.

    C# 2

  2. untitled-note untitled-note Public

    An open-source app for taking notes that feels awesome to use

    TypeScript 15 12

  3. anderbellstudios/triangles anderbellstudios/triangles Public

    Three-player Tic Tac Toe on a 4x4 grid.

    TypeScript 1

  4. ianstormtaylor/slate ianstormtaylor/slate Public

    A completely customizable framework for building rich text editors. (Currently in beta.)

    TypeScript 31.7k 3.3k

  5. User-controlled Keys Considered Harm... User-controlled Keys Considered Harmful - Two Important Takeaways from CVE-2025-55182
    1 
    # User-controlled Keys Considered Harmful
    2 
    
              
    
              
    
                3
                
    _Two important takeaways from CVE-2025-55182_
    
              
    
              
    
                4
                
    
              
    
              
    
                5
                
    We now have a public [POC](https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3) for CVE-2025-55182, the React Server vulnerability that allows remote code execution on affected servers. The details of how the exploit works are fascinating, and they highlight a couple of important but obscure facts about JavaScript itself that all JS developers should be aware of so that we hopefully don't make the same mistakes in our own code.
    
              
    
          
    
    
    
  
    

    6. 

      

  6. 
  
    
    
    
      
    
        
        A guide to mitigating XSS for link a...  A guide to mitigating XSS for link and embed components in Slate      
    

          
    
              
    
                1
                
    Just a reminder for anyone using Slate:
    
              
    
              
    
                2
                
    
              
    
              
    
                3
                
    ⚠️ **Your app's link and embed components are vulnerable to XSS unless you explicitly check the URL protocol in the component. Attackers can use this to hijack your users' accounts.**
    
              
    
              
    
                4
                
    
              
    
              
    
                5
                
    ```jsx
    
              
    
          
    
    
    
  
    

    7.