Top posts

Every blog post that took off on Hacker News, ranked by the votes of its best submission. 8,469 posts.

Web & Frontend
Any year
2558

Springs and bounces in native CSS

The “linear()” timing function is a game-changer; it allows us to model physics-based motion right in vanilla CSS! That said, there are some limitations and quirks to be aware of. I’ve been experimenting with this API for a while now, and in this post, I’ll share all of the tips and tricks I’ve learned for using it…

2568

Why I tend not to use content negotiation

In this essay, Carson Gross explores his preference for separating JSON and hypermedia APIs instead of using content negotiation, a feature in HTTP that allows clients to request different formats (e.g., HTML, JSON). He discusses the limitations of content negotiation in APIs, especially when mixing stable, versioned…

2570

PeerTube 4 RC

Customization, content discovery, empowering through more control... Here is an overview of the new version of our software solution to create alternative platforms to YouTube and federate them together. « Frama is not just... » Each week of Fall 2021, we want to present you the diversity of what Framasoft does. As…

2579

Skype 5 for Mac

A while back, when Skype's group videochat feature was still free, a friend of mine sent me a Skype message, asking me whether it was possible to do videochat with more than one person in Skype. "Sure," I replied, "you can do that, but you need to install the new Skype 5 beta." I sent her the link. A few minutes…

2580

The woes of sanitizing SVGs

Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an <svg> element and appends it into the main document for various operations (eg. measuring SVG bounding box in a more reliable way than viewbox or width/height).