terjanq
Security Engineer at google
Poland
Summary
🤩
Rockstarterjanq is a Security Engineer with 11 years of hands-on experience focused on practical application security and front-end exploit research, currently working in Google’s information security organization from Poland. He contributes to open source security tooling and remediation — for example, adding clear deprecation guidance to Google’s archived Caja project — and maintains Tiny-XSS-Payloads, a lightweight, UX-focused collection that demonstrates DOM-based XSS techniques and PoC generation. Comfortable bridging security research and developer ergonomics, he implements polished front-end interfaces to make complex vulnerability payloads accessible and auditable. Known for pragmatic communication and clean handoffs, he blends console-level messaging, sanitizer awareness, and usable tooling to help teams migrate away from risky patterns.
11 years of coding experience
Stackoverflow
311reputation
23kreached
7answers
10questions
Github Skills (19)
javascript10
css10
dom-manipulation10
front-end-development10
xss10
payload10
html10
security9
ui-design9
web-security9
bug-tracker7
bug-reporting7
bugtracking7
sorting6
exploit6
Programming languages (10)
Github contributions (5)
terjanq/Tiny-XSS-Payloads
Jul 2020 - Oct 2021
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
Role in this project:
Front-end Developer
Front-end DeveloperContributions:36 commits, 6 PRs, 38 pushes in 1 year 3 months
Contributions summary:Terjanq primarily contributed to the front-end development of a collection of XSS payloads. Their work involved implementing the user interface, including features like checkboxes, and dynamically displaying payloads. They also focused on enhancing the user experience, such as adding PoC (Proof of Concept) functionalities and improving the layout of the payloads, and added features such as DOM-based XSS support. The user also updated the project's styling and incorporated external libraries for improved code highlighting and the addition of github and twitter buttons.
xssjavascriptctfbugbountypayloads
googlearchive/caja
Nov 2020 - Nov 2020
Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.
Role in this project:Security Engineer
Security EngineerContributions:9 commits, 2 PRs, 3 comments in 1 day
Contributions summary:Terjanq's commits focused on adding deprecation messages to several JavaScript files within the Caja project. These messages, displayed in the browser's console, announced the project's archiving and encouraged users to migrate to alternative solutions like Closure. The user also updated commit messages related to HTML and CSS sanitizers, likely specifying the deprecation of the sanitizers.
cssjavascript
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.