121
Zero-day CSS: CVE-2026-2441 exists in the wild
The Stable channel has been updated to 145.0.7632.75/76 for Windows/Mac and 145.0.7632.75 for Linux, which will roll out over the coming d...
122
Email obfuscation: What works in 2026?
Here are some of the best techniques for keeping email addresses hidden from spammers—along with the statistics on how likely they are to be broken.
123
Returning to Rails in 2026
I love a good side-project. Like most geeks, I have a tendency to go down rabbit holes when faced with problems - give me a minor inconvenience and I’ll happily spend weeks building something far more elaborate than the situation warrants. There’s joy in having a playground to explore ideas and “what ifs”; Building…
124
Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API…
125
Vivaldi 8.0
More than thirteen years in, and I am still as excited about building this browser as I was on day one. Maybe more. That excitement comes from a genuine belief that the people who use Vivaldi deserve…
126
Multi-stroke text effect in CSS
I used to see that retro multi-stroke text effect quite often and tried to replicate it using the CSS text-stroke property, but the results never quite matched. Because text-stroke accepts a single value, stacking elements was the only workaround I could think of, though it didn't seem to work.
127
Example.com just launched the biggest redesign in decades
A look at the history of visual changes to example.com.
128
It took a year to ship WebAssembly in Anubis
After a year of work, hundreds of commits, 5 generations of pull requests, dozens of tests, rewriting part of Anubis in Rust, the first compiler bug of my career, and at least three times making my tower run out of ram I think I have finally done it. The next version of Anubis will ship with WebAssembly-based proof of…
129
WebMCP is available for early preview
WebMCP aims to provide a standard way for exposing structured tools, ensuring AI agents can perform actions on your site with increased speed, reliability, and precision.
130
HTML Lists
This second installment in the "You don't know HTML" series is going to be all about the ways that we put collections of things together
131
One year of sponsored Servo development
Looking back on Servo's first donation-funded role.
132
Monetization Gateway: Charge for any resource behind Cloudflare via x402
We're opening the waitlist for our Monetization Gateway, which will allow you to charge for any web page, dataset, API, or MCP tool behind Cloudflare. The charges will settle in stablecoins over the x402 open protocol, with no payments stack of your own to build.
133
ASCII Clouds
A dynamic ASCII art cloud generator that creates cloud patterns in real-time
134
SAML: A fractal of bad design
SAML, the XML-based authentication protocol that birthed the SSO industry, is fundamentally flawed due to XML complexity, canonicalization issues, enveloped signatures, and design ossification, making it vulnerable to signature wrapping attacks and parser differentials that persist despite decades of awareness…
135
136
What happened to WebAssembly
Where are they now? You won't believe her new look!
137
Road to Elm 1.0
A delightful language with friendly error messages, great performance, small assets, and no runtime exceptions.
138
During Helene, I just wanted a plain text website
We recently passed the one-year anniversary of Hurricane Helene and its devastating impact on Western North Carolina. As a web developer, I am thinking again about my experience with the mobile web on the day after the storm.
139
Separating the Wayland compositor and window manager
Traditional Wayland compositors have a monolithic architecture that combines the compositor and window manager into a single program. This has the downside of requiring Wayland window managers to do the significant work of implementing an entire Wayland compositor as well.
140
YouTube, your RSS feeds are broken
We'd love to keep using your feeds in our feed readers, but we're gonna need them to work.
141
Why tiny JPEGs look different in Chrome
Guillaume Técher — Personal website
142
I ported Kubernetes to the browser
Almost 100,000 lines of LLM-generated code in 2 months, and none of it is slop.
143
What About Rails?
DHH's opening keynote had shockingly little to say about Rails.
144
Discord will soon let anyone find public server messages through Google
Starting on November 16, 2026, conversations in Discoverable Servers will be easier to find for people searching the web. Admins can choose which channels are surfaced on the web. Private servers, DMs, and GDMs are not included.
145
JPEG XL vs. AVIF for web use-cases
JPEG XL has landed, but how does it compare?
146
Why don't more developers “use the platform”?
For years, advocates for web standards, performance, and accessibility have implored web developers to “use the platform”. I’ve often been one of those…
147
Can I start using Wayland in 2026?
Wayland is the successor to the X server (X11, Xorg) to implement the graphics stack on Linux. The Wayland project was actually started in 2008, a year before I created the i3 tiling window manager for X11 in 2009 — but for the last 18 years (!), Wayland was never usable on my computers. I don’t want to be stuck on…
148
Friendship ended with Deno, now Node is my best friend
The one where I go crawling back.
149
How we run Firecracker VMs inside EC2 and start browsers in less than 1s
Every Browser Use Cloud session runs in its own Firecracker microVM on regular EC2. It starts in under a second and costs $0.02 per browser hour, down from $0.06.
150
Sweet Jeebus, macOS 27 Golden Gate Removes the Dumb Icons from Menu Items
This is my favorite news from all of WWDC this week. I mean that. In a small way I mean it because I so loathe this aspect of MacOS Tahoe. But in a large way I mean it because it’s proof that the rot has been rooted out of Apple’s software design team.