The browser extension ecosystems are definitely a weak link in term of security. Better not have too many random extensions installed.

Need to write a tutorial? Here is a good set of rules to follow. Don't be fooled, it sounds simple but it is hard work.

Parsers are required to normalize URLs but often they just don't. To be kept in mind in your code.

Very good background information on the latest attempt at discrediting Wikipedia.