You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
DOM-based cross-site scripting (DOM XSS) happens when data from a user-controlled source (like a username, or a redirect URL taken from the URL fragment) reaches a sink, which is a function like eval() or a property setter like .innerHTML that can execute arbitrary JavaScript code. DOM XSS is one of the most common web security vulnerabilities, and it's common for dev teams to accidentally introdu
When we work with code, we don't just care about performance; we also care about human-centric concerns like convenience, elegance, and readability. In most cases, the human-centric concerns take priority: any time you have chosen to use a framework over "vanilla JS", or a high-level language over a low-level one, you have implicitly chosen developer experience over performance. Everyone has diffe
It's consistently fast, yo In my previous articles I talked about how WebAssembly allows you to bring the library ecosystem of C/C++ to the web. One app that makes extensive use of C/C++ libraries is squoosh, our web app that allows you compress images with a variety of codecs that have been compiled from C++ to WebAssembly. WebAssembly is a low-level virtual machine that runs the bytecode that is
What is SWC? swc (speedy web compiler) is a super-fast JavaScript compiler. What can SWC do? It can transpile TypeScript / jsx / ECMAScript 2019 to browser-compatible JavaScript. // input.js class Foo { set foo(v) {} } class Bar extends Foo { get bar1() {} async bar2() {} } How fast is SWC? It’s 16x - 20x faster than babel even on single-core synchronous benchmark. Note that actual performance ga
new TypeIt("#hero", { speed: 50, startDelay: 900, }) .type("the mot versti", { delay: 100 }) .move(-8, { delay: 100 }) .type("s", { delay: 400 }) .move(null, { to: "START", instant: true, delay: 300 }) .move(1, { delay: 200 }) .delete(1) .type("T", { delay: 225 }) .pause(200) .move(2, { instant: true }) .pause(200) .move(5, { instant: true }) .move(5, { delay: 200 }) .type("a", { delay: 350 }) .mo
To improve wheel scrolling/zooming performance, developers are encouraged to register wheel and mousewheel event listeners as passive by passing the {passive: true} option to addEventListener(). Registering the event listeners as passive tells the browser that the wheel listeners will not call preventDefault() and the browser can safely perform scrolling and zooming without blocking on the listene
New Release: 2.10.0 The JSHint team Feb 5th, 2019 This release introduces support for the three most recent editions of JavaScript: ES7, ES8, and ES9. Users can enable support for any one of these via the esversion linting option. Perhaps most notably, this includes "async functions." Since their standardization in ES2017, no feature has been more requested. We're happy to add support for this pow
プログラミングにおいて避けては通れないのがエラーです。JavaScriptにおいても、多数のエラーに悩まされることになります。 エラーはそのメッセージさえ読めば原因がわかることも多いのですが、プログラミングに慣れてない人がJavaScriptの柔軟なコードに振り回されていると、なかなかメッセージからは原因を推察できません。 そこでこの記事ではよくあるエラーとその対策についてまとめます。 よくあるJavaScriptエラーの原因と対策 基本的に以下の環境での実行とします。 Google Chrome しかしエラーメッセージはFirefoxやNode.jsでもそう変わらないと思います。 Chromeにおいて、エラーを確認するためのコンソールはF12キーを押すと表示できます。確認したいページを開いて、そこでF12を押してください。 Uncaught SyntaxError: Unexpected
Blog Lightning-fast templates & Web Components: lit-html & LitElement 2019-02-05 Today we're excited to announce the first stable releases of our two next-generation web development libraries: lit-html and LitElement. lit-html is a tiny, fast, expressive library for HTML templating. LitElement is a simple base class for creating Web Components with lit-html templates. If you've been following the
Generally developers believe that you need TypeScript or Flow if you want type safety for JavaScript. This article we will explore a third alternative to achieve those same goals using just JSDoc comments and Visual Studio Code as your editor. Technically, we are going to use TypeScript but not for compiling our code. Instead we’ll use it to check the types of our JavaScript code during code time
株式会社クリアコード > ククログ > Webアプリや拡張機能(アドオン)で、Web Crypto APIを使ってローカルに保存されるデータを暗号化する ※注記:本文末尾の「公開鍵暗号ではなく共通鍵暗号を使う理由」の説明について、2019年1月30日午前0時から21時までの間の初出時に内容の誤りがありました。また、2019年1月30日午前0時から2月5日20時頃までの間において、本文中での AES-CTR による暗号化処理が、 nonce を適切に指定していないために脆弱な状態となっていました。お詫びして訂正致します。初出時の内容のみをご覧になっていた方は、お手数ですが訂正後の説明を改めてご参照下さい。 クリアコードで主にMozilla製品のサポート業務に従事している、結城です。 FirefoxやThunderbirdがSSL/TLSで通信する際は、通信内容は自動的に暗号化されます。その一
ungap Modern Web development one jump at the time Photo by Denny Luan on Unsplash About The ungap project was born after years of attempts to always fix the same issue, but never in a modular way and, most importantly, never in a single, 100% code covered, organization. Focused on size, compatibility, and quality Each module is written in ES5 compatible syntax to avoid both unnecessary transpilers
With the recent 1.0 release of Rollup, code-splitting has become a first-class feature of the notorious JavaScript module bundler. Here I want to make the case for why this is a game-changer not only for the frontend but for libraries as well. In this article you will learn: How to bundle a library with Rollup (and why you would want this), including some best practices, but most importantlyHow Ro
This feature is well established and works across many devices and browser versions. It’s been available across browsers since July 2015. * Some parts of this feature may have varying levels of support. Learn more See full compatibility Report feedback The <script> HTML element is used to embed executable code or data; this is typically used to embed or refer to JavaScript code. The <script> eleme
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く