3481
Public CDNs Are Useless and Dangerous
Once upon a time, loading common scripts & styles from a public CDN like cdnjs or Google's Hosted Libraries was a 'best practice' - a great way to instantly...
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,469 posts.
3482
Browsh for text-based internet browsing (2018)
The standard for browsing the web over a text-=based terminal is Lynx, right? ...
3483
The new HTTP QUERY method explained
In this blog post, we take a deep dive into the new HTTP QUERY method, explaining the history behind it as well as the advantages and disadvantages of using it.
3484
HTTP/3: Everything you need to know about the next-generation web protocol
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
3485
CORS is not meant to secure an API endpoint
CORS does not secure your API: why browser-side API keys are unsafe, and how to protect Drupal JSON:API endpoints with proper authentication.
3486
How a hypermedia approach can address usability concerns with multi-page apps
In this essay, Carson Gross gives an analysis of Rich Harris's talk 'Have Single-Page Apps Ruined the Web?', exploring the debate between Single-Page Applications (SPAs) and Multi-Page Applications (MPAs). Carson examines Harris's criticisms of both approaches and proposes hypermedia-oriented solutions using htmx…
3487
3488
Our best practices are killing mobile web performance
Web performance rules invented for desktop web access need to be revised for the mobile era.
3489
Vue.js Creator Evan You Interview
We spoke with Evan about the release of Vue 3, his opinion on no-backend & fullstack approaches, Vue use cases and the work-life balance of the creator of the technology.
3490
Popular iPhone and iPad Apps Snooping on the Pasteboard
This article provides an investigation of some popular apps that frequently access the pasteboard without user consent. These apps range from popular games and social networking apps, to news apps of major news organizations. We found that many apps quietly read any text found in the pasteboard every time the app is…
3491
How does it know I want CSV? – An HTTP trick
Forgotten parts of RFC2616
3492
3493
3494
Surfing the Modern Web with Ancient Browsers
I spend a fair amount of time working with legacy operating systems. Apart from being obsolete themselves they suffer from a common problem – the web browsers are simply unusable on a present day Internet. You start by getting JavaScript error on google.com and it only gets worse once you go further. Try going to…
3495
3496
RSS Feed Best Practices
These are some technical tips for publishing a blog. These have nothing to do with good content, just how to share that content. The recommendations are roughly in order of importance and have rationale for why they are that important.
3497
More HTML5 APIs
This blog post explores many HTML5 APIs, including Fullscreen API, Page Visibility API, getUserMedia API, Battery API, and Link Prefetching!
3498
3499
Debugging Asynchronous JavaScript with Chrome DevTools
A powerful feature that makes JavaScript unique is its ability to work asynchronously via callback functions. Assigning async callbacks let you write event-driven code but it also makes tracking down bugs a hair pulling experience since the JavaScript is not executing in a linear fashion.
3500
3501
3502
3503
What happened with the Web Monetization API?
I was pretty hot on it for a minute. I wanted it to succeed and thought it had the bones to make it. Coil was the main startup trying to push it. They did the right thing by just making it work fir…
3504
Search Results are officially AMP’d
Now when you search on your mobile device, you’ll see a label that indicates which sites have pages that are ready to load lightning fast.
3505
The Play Framework at LinkedIn
I’m excited to announce the next step in LinkedIn’s service infrastructure: the Play Framework. Play is a modern web framework that combines the performance and reliability of Java and Scala, the power of reactive programming, and the productivity of full hot reload support. We’ve been running Play
3506
Request bodies in GET requests
12 years ago I asked on Stack Overflow: Are HTTP GET requests allowed to have request bodies? . This got a 2626 upvotes and a whopping 1.6 million views, so clearly it’s something lots of people are still curious about, and in some cases disagree with the accepted answer.
3507
Things that suck in AngularJS
Every once in a while, I find that someone is interested in AngularJS, but not sure if they should stick to their jQuery comfort zone or mak...
3508
The Promise of Firefox OS
“But how is it going to beat Android or iOS?” That’s the reaction many people have when I tell them that I am working on Firefox OS, the new mobile operating system from Mozilla. It is a logical rea
3509
Slightly reducing the sloppiness of AI generated front end
I've been trying to make progress on a herculean task; I want decent looking programs for personal use which I can generate quickly using AI agents yet I'm a person without taste controlling an AI without taste. I found "one weird trick" that does enough for me, the results are not extra nice but it doesn't make me…
3510