Is Your Site Leaking Password Reset Links?
Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?
Topics /
The most popular blog posts about web & frontend on Hacker News. 8,467 posts.
Emailed password reset links are a common part of web applications. Is your site leaking these confidential links to third party sites?
Lynx is a text based browser. You think the people who browse without JavaScript are weird? Lynx doesn't even do images or CSS! It downloads HTML and renders it at blazing fast speed. If you ever wondered just how slow modern web development has made the web - Lynx will show you the meaning of haste. I use Lynx most…
The Official Web Site of Nicholas C. Zakas
V8 v6.8 features reduced memory consumption and several performance improvements.
While browsing the web, you've almost certainly come across sites that let you log in using your social media account. The chances are that this feature is ...
With our first beta release of Bootstrap 5, we're calling it on new features and breaking changes. From here on out, we're only fine-tuning features, bugs, and…
A team of computer scientists at the University of California San Diego and Brave Software. have developed a tool that will increase protections for users’ private data while they browse the web.
You might have heard about Mozilla's WebExtensions, our implementation of a new browser extension API for writing multiprocess-compatible add-ons. Maybe you've been wondering what it was about, and how you ...
We created a centralized authentication service, called Identity, by building upon functionality from the OpenID Connect (OIDC) specification.
Here, I try to document the good practices that our team has learned along the way building Backbone applications. This document assumes that you already have some knowledge of Backbone.js , jQuery , and of course, JavaScript itself.
Notoriously tough to build, undo/redo in a multiplayer environment is even more fraught with difficulty. In this article, we will take you on a behind-the-scenes exclusive, explaining one of the most complex developer issues for multiplayer apps.
Encryption for all GitHub Pages sites
This is the final part of a 4-part miniseries on issues with WebAssembly and proposals to fix them.
Next.js 9.5 introduces Stable Incremental Static Regeneration, Custom Base Path, Redirects and Rewrites, Webpack 5 Beta, and more!
Debut of LiveBeats social music app.
We introduce Excalidraw+, built on the open-source, enhancing the whiteboard app with several team features.
Next.js 9.3 introduces new static-site generation improvements, native support for SCSS, reduced bundle sizes, static 404 pages, and more!
The web platform running the winning campaign of the next President of France, Emmanuel Macron, is made with Symfony and is open source.
Let’s walk through the process of building a dead simple Phoenix application from the ground up.
This “feature” accomplishes nothing of value for anyone, including the streaming services, but imposes a massive (and for most people, confusing and frustrating) hindrance on honest people simply trying to easily capture high-quality (as opposed to, say, using their damn phone to take a photograph of their reflective…
Today we’re introducing the first family of Android One phones in India.
Interesting things about passkeys in webauthn
So instead of trying to sell half a million phones to *anyone*, try to sell half a million phones to a specific target: people in the market for the latest and greatest phone in the world.