Flowタイプチェッカーはただの型付きのJavaScriptではなく、今やFacebookのニーズを満たす中核を担うSpring BootによるAPIバックエンド構築実践ガイド 第2版 何千人もの開発者が、InfoQのミニブック「Practical Guide to Building an API Back End with Spring Boot」から、Spring Bootを使ったREST API構築の基礎を学んだ。この本では、出版時に新しくリリースされたバージョンである Spring Boot 2 を使用している。しかし、Spring Boot3が最近リリースされ、重要な変...
Mutation XSS via namespace confusion - DOMPurify < 2.0.17 bypass - research.securitum.com
In this blogpost I’ll explain my recent bypass in DOMPurify – the popular HTML sanitizer library. In a nutshell, DOMPurify’s job is to take an untrusted HTML snippet, supposedly coming from an end-user, and remove all elements and attributes that can lead to Cross-Site Scripting (XSS). This is the bypass:
Self-Parking Car in 500 Lines of Code | Trekhleb
TL;DR In this article, we'll train the car to do self-parking using a genetic algorithm. We'll create the 1st generation of cars with random genomes that will behave something like this: On the ≈40th generation the cars start learning what the self-parking is and start getting closer to the parking spot: Another example with a bit more challenging starting point: Yeah-yeah, the cars are hitting so
Xterm.js
Getting Started First you need to install the module, we ship exclusively through npm so you need that installed and then add xterm.js as a dependency by running: To start using xterm.js on your browser, add the xterm.js and xterm.css to the head of your html page. Then create a <div id="terminal"></div> onto which xterm can attach itself. Finally instantiate the Terminal object and then call the
Announcing Lit 2 stable release
Today we're announcing the stable release of Lit 2. Lit 2 is a major update: it's smaller, faster and better than before, it lays the foundation for server-side rendering, and it's all wrapped up in the new lit package on npm. Lit has come a long way since April when we announced the first release candidate for Lit 2. Since then, many partners have tested the release candidates on big applications
ChowJS: an AOT JavaScript engine for game consoles
Hello, and welcome to the MP2 Games tech blog! I’m Mathias, and this is the first entry in what will hopefully become a long series of technical deep dives into some of the work we do at MP2. Recently, we have been working on getting a large JavaScript game to run on game consoles. To make that happen, we made use of ChowJS, our ahead-of-time JavaScript compiler and runtime which can target game c
The ReScript Programming Language
Fast, Simple, Fully Typed JavaScript from the FutureReScript is a robustly typed language that compiles to efficient and human-readable JavaScript. It comes with a lightning fast compiler toolchain that scales to any codebase size. module Button = { @react.component let make = (~count) => { let times = switch count { | 1 => "once" | 2 => "twice" | n => n->Int.toString ++ " times" } let text = `Cli
Modern client-side routing: the Navigation API | Web Platform | Chrome for Developers
Single-page applications, or SPAs, are defined by a core feature: dynamically rewriting their content as the user interacts with the site, instead of the default method of loading entirely new pages from the server. While SPAs have been able to bring you this feature via the History API (or in limited cases, by adjusting the site's #hash part), it's a clunky API developed long-before SPAs were the
Using CSS Module Scripts to import stylesheets | Articles | web.dev
With the new CSS module scripts feature, you can load CSS style sheets with import statements, just like JavaScript modules. The style sheets can then be applied to documents or shadow roots in the same manner as constructable stylesheets. This can be more convenient and more performant than other ways of importing and applying CSS. Browser Support CSS module scripts are available by default in Ch
Don't attach tooltips to document.body
TL;DR Instead of attaching tooltips directly to document.body, attach them to a predefined div in document.body. BAD <body> <!-- temporary div, vanishes when tooltips vanishes --> <div>my tooltip</div> <body> GOOD <body> <!-- this div stays forever, just for attaching tooltips --> <div id="tooltips-container"> <!-- temporary div, vanishes when tooltips vanishes --> <div>my tooltip</div> </div> <bo
JavaScript Development: Making a Web Worker optional
In case you have a lot of JavaScript related logic running inside a main thread or a Web Worker, it makes perfect sense to move expensive logic into another worker. Workers run inside a different thread using their own CPU if possible. However, there can be use cases where in some scenarios there is a lot of JS related workload on a given thread, while in other scenarios this thread is mostly idle
A future for SQL on the web
I discovered something absurd recently and I’m very excited to tell you about it. The end result is absurd-sql, and it’s a persistent backend for SQLite on the web. That means it doesn’t have to load the whole db into memory, and writes persist. In this post I will explain the absurdities of the web’s storage APIs (mainly IndexedDB), show how SQLite provides a 10x perf improvement, explain all the
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
リジューム可能なJavascriptフレームワークQwikとは
WICG、mXSS攻撃に対抗する新たなHTML Sanitizer APIプロポーザルを公開
Safe DOM manipulation with the Sanitizer API | Articles | web.dev
GitHub - cesanta/elk: A low footprint JavaScript engine for embedded systems
@storybook/cli - Storybook
GitHub - socketsupply/tonic: A Low Profile Component Framework – Stable, minimal, easy to audit, zero-dependencies and build-tool-free.
iframe sandboxでユーザー入力スクリプトを実行する
GitHub - neomjs/neo: The application worker driven frontend framework
