Search for a command to run...
Google shipped the Prompt API in Chrome 148 on May 5, 2026. Mozilla objected. Apple's WebKit team objected. The W3C TAG objected. Microsoft Edge disabled the feature entirely despite running on the sa
In this brief content, I am sharing about the Above-The-Fold strategy to load CSS and why it matters to improve the page loading of our web pages. 📁 Above-The-Fold strategy on the web is a practice that extracts critical CSS declaration to render th...
A brief and useful content about the mechanics on Cross-Origin Read Blocking, Cross-Origin Resource Policy and Cross-Origin Resource Sharing against Meltdown, Spectre and CSRF Attacks. CORB By design, Cross-Origin Read Blocking validates browser requ...
We can ignore Cookies danger by just not recommending its usage, but the fact is that at least 55% of all the websites use Cookies RIGHT NOW even with lots of existing cookieless strategies. So how to protect Cookies against Common XSS Attacks? Well,...
Know how each Cross-Site Scripting Attack behaves is crucial to start to think about how vulnerabilities in our web apps allow malicious codes to be executed using the browser to take sensible data from users. That's what this article is about. Refle...
Just a catch up about how the Proxy object works on JavaScript to allow us to implement Proxy patterns. 📌 JavaScript's Proxy object allows us to intercept and modifies any JavaScript object. 📌 JavaScript's Proxy object is an elegant and safe way fo...
The How, The Where, The Web API
Would you like to hear more about Set and Map objects in JavaScript? Let's catch up with them on this thread 🧵 Set in JavaScript 👇 📌 It's not key/value like the Object type. Keys are just values exposed 📌 Don't accept duplicated values 📌 It's i...
Want to help users to avoid some Phishing Attacks with HTML? 👉 Use rel="noopener noreferrer" while adding external links to your website to improve user navigation security. <a rel="noopener noreferrer" href="https://..."> External Link </a> 🐿 no...