The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get connected servers on first login without per-app OAuth.
A guide to implementing JSON-LD on your personal website for better SEO, covering WebSite, Person, BlogPosting, and more with ready-to-use code snippets.
Investigating JPEG XL's place as a Web image codec.
Lessons about XML from the open source IRS Tax Withholding Estimator.
I’m sad to say that CSS-Tricks is stuck in limbo again. The site was acquired by Digital Ocean in 2022, and it continued to run under their ownership until February of 2023, when DigitalOcean fired the people working on it. The site stayed latent for a year before DigitalOcean re-hired lead editor Geoff Graham in June…
In part 1 of this series , we found that users generally view the most popular collaborative text editing algorithms (including the most popular library, Yjs ) as silently corrupting their documents when the algorithms resolve direct editing conflicts. We argued that, while this is potentially ok for live…
Update: In Safari 27 and Safari Technology Preview 247, we’re introducing the Safari MCP server — a Model Context Protocol server for web developers that makes your web development and debugging workflow faster and more powerful.
Scratch has a long history of SVG-related vulnerabilities. The source of these is that Scratch parses user-generated (ie. attacker-controlled) content into an <svg> element and appends it into the main document for various operations (eg. measuring SVG bounding box in a more reliable way than viewbox or width/height).
An update on the Model Context Protocol roadmap and focus areas for upcoming specification releases.
i found yet another way to invoke arbitrary functions in javascript without using parentheses
Plus new CSS functions and WEbGL2 improvements.
Python Workers allow developers to run Python web frameworks and AI orchestration libraries natively in the Cloudflare Workers runtime. You can seamlessly integrate with Cloudflare's ecosystem including D1, R2, and Workers AI without writing any JavaScript glue code.
A note from a developer who keeps watching good design die in boardrooms.
The one where I suggest finding the nearest lifeboat.
Building a SPA (Single-page Application) is a complex puzzle: a JavaScript framework that draws the view, an API serving JSON, and 2 independent…
Started by rafalp on Dec. 12, 2023 in the Roadmap category. 6 replies, last one from July 25, 2024.
Ryanair are Europe’s most profitable airline and they are masters of this noble form.
The hacked digital advertiser was caught serving malicious ads that allowed hackers to steal a victim's cryptocurrency.
I’ve done a lot of web development over the years. I started around the year 2000, just after PHP 3.0 was released and started taking over the web world. I’ve used all kinds of approaches for generating HTML: raw PHP, string concatenation in Python, Smarty templates in PHP, Template Toolkit in Perl, and Jinja/Django…
A concrete example of why using native HTML as much as possible is better than slapping ARIA on top of things.
I've built the same webhook consumer three times at three companies. The fourth time, I want a better primitive.
A lot of people want to make a website but don’t know where to start or they get stuck. That’s in part because our perception of what websites should be has changed so dramatically over the last 20 years.
The three companies (along with Mozilla, which is on one of their “ad features in the browser” kicks again) are drawing up a built-in advertising measurement system, called Attribution Level 1 , as a standard feature of web browsers. The system is intended to measure the effectiveness of advertising by enabling…
We can mostly blame Internet Explorer, as always.
Driven by curiosity, I decided to find out what the IndieWeb tag that kept showing up on some blogs and Mastodon toots was all about. I quickly…
We create beautiful expressions through programming and deliver the best possible experiences.
Rescuing a field from disappearing
Social media was once hailed as the great democratizer of information. It promised a world where anyone could share their voice, connect with like-minded communities, and discover authentic human perspectives. But in 2025, the landscape looks very different. Social platforms are drowning in a flood of Generative AI…
