Where Recursion Ends: Render Limits for Untrusted UI

My last article ended on a list of things I thought a hardened dynamic UI runtime still needed:...