Topics /
Web & Frontend
The most popular blog posts about web & frontend on Hacker News. 4,614 posts.
The problem with Angular
In the last six months or so I talked to several prospective clients that had a problem finding front-end consultants in order to help their dev teams get a grip on their Angular projects.
URL-Driven State in HTMX
Build stateful HTMX applications using URL parameters as your state store, creating naturally bookmarkable and shareable interfaces
Screw You, Microsoft Edge
Recently while searching for a book on Bookshop.org, I was interrupted by a popup apparently generated by Microsoft Edge advising me of an alternative:
Kate editor on all platforms
Unix like systems with X11 or Wayland All Unix like systems with either X11 or Wayland are well supported since ever. Linux with X11 and now Wayland is for a long time the primary system on that Kate work happens. Over the years it was, like most of the KDE applications, ported to various BSD variants. Be it some…
Experimenting a new syntax to write SVG
It's been a while since I introduced a new syntax to the css-doodle project to solve my own problems. While I'm not sure it would be useful elsewhere, I need to make some notes before I forget the details.
Flexible data tables with CSS Grid
Now that we've launched, I can finally talk about the secret project I've been working on for the last two years. One interesting piece of the Teamwork CRM puzzle was the "list view". It's a powerful page component which exists seven times in the app — a table on steroids essentially. I could talk about it…
Why Is the Web So Monotonous? Google
Does it ever feel like the internet is getting worse? That’s been my impression for the last decade. The internet feels now like it consists of ten big sites, plus fifty auxiliary sites that come up whenever you search for something outside of the everyday ten. It feels like it’s harder to find amateur opinions on…
CSRF protection without tokens or hidden form fields
A couple of months ago, I received a request from a random Internet user to add CSRF protection to my little web framework Microdot, and I thought it was a fantastic idea.When I set off to do this…
Broken Links
I’ve been getting madder and madder about the increasing use of dorky web links; for example, twitter.com/timbray has become twitter.com/#!/timbray . Others have too; see Breaking the Web with hash-bangs and Going Postel . It dawns on me that a word of explanation might be in order for those who normally don’t worry…
Please, expose your RSS
I noticed a lot of people don't have a link to their RSS feeds on their sites or have the correct metadata for auto-discovery
WordPress 18
Today marks eighteen years since the very first release of WordPress. I consider myself so lucky to have co-founded the project alongside Mike Little. Who could have imagined that our nights and we…
I added a Bluesky comment section to my blog
How I embedded replies from Bluesky directly on my site.
Hacking Github with Webkit
Previously on Github: XSS , CSRF ( My github followers are real , I gained followers using CSRF on bitbucket ), access bypass, mass assignm...
Browsers are the most likely disruptor of the mobile duopoly
Under regulatory pressure, mobile OSes are opening up and adding features that will allow PWAs to disrupt app stores ... Yet with shockingly few exceptions, coverage accepts that the solution to crummy, extractive native app stores will be other native app stores. ... The press fails to mention the web as a sustitute…
Why isn't the <html> element 100% supported on caniuse.com?
I saw a Mastodon post that made me laugh this morning. It seemed sort of crazy that the html element wouldn’t have 100% support on CanIUse.com. Heck, I’ve been using it since 1994 and it worked just fine back then! This led me down a bit of a rabbit hole.
What happened to Vivaldi Social?
A deep dive into the events of Saturday 8 July 2023, when user accounts started disappearing from the Vivaldi Social Mastodon instance.
Cheap Recurring Payments with Stripe and AWS Lambda
If you run a small SaaS business, you need a recurring billing solution, and there are a lot of options out there. There’s Chargify (from $149/month), Chargebee (from $99/month), Recurly (from $99/month), MoonClerk (from $15/month), etc. All of these platforms have features beyond recurring payments, which increases…
Server-sent events, WebSockets, and HTTP
The orange site is currently discussing an article about Server-Sent Events, especially as compared with WebSockets (and the emerging WebTransport). Both the article and discussion are well-informed, but I think they miss out on one aspect that has fairly deep implications.
How we hacked Facebook with OAuth2 and Chrome bugs
TL;DR We (me and @isciurus ) chained several different bugs in Facebook, OAuth2 and Google Chrome to craft an interesting exploit. Mallory...