goingerのブックマーク - はてなブックマーク

Your API-Centric Web App Is Probably Not Safe Against XSS and CSRF
Most of the developments I’ve participated in recently follow the “single-page application based on a public API with authentication” architecture. Using Angular.js or React.js, and based on a RESTful API, these applications move most of the complexity to the client side. But as we’re reinventing web applications, we need to reinvent web application security, too. Is an API-centric architecture vu
goinger 2017/04/28
token

header

not

safe

ajax
リンク
Client-side full-text search in CSS
How do we design, develop, and run websites and web applications today? A blog by François Zaninotto Using data- attributes for indexation, and a dynamic stylesheet with a CSS3 selector for search, it is straightforward to implement a client-side full-text search in CSS rather than JavaScript. Here is an example. The Searchable List The Search Code The search is very straightforward: it relies on
goinger 2013/09/11
リンク
1

はてなブックマーク