setHTML(), Trusted Types and the Sanitizer API
New setHTML() and Sanitizer API prevent XSS by safely inserting HTML into the DOM.
Web Standards
Daily web platform news
setHTML(), Trusted Types and the Sanitizer API
New setHTML() and Sanitizer API prevent XSS by safely inserting HTML into the DOM.
Auto-positioned tooltips using CSS Anchor Positioning with position-area and fallbacks.
CSS style queries range syntax, if(), interestfor attribute, and unified select rendering.
Comparing 10 meta-frameworks: Marko, SolidStart, SvelteKit, Qwik lead. React has limits.
Chrome plans to remove XSLT by 2027 due to low usage and security risks. Other browsers agree.
When to use JSON module imports vs fetch(): caching, responses, errors, and use cases.
Stable compiler auto-optimizes components, improves speeds up to 12%, used in Meta apps.
Proposed
Rust-based unified toolchain with build, test, lint, format, and visual tools for JS projects.
10-minute anonymous survey to make MDN documentation more useful for everyday work.
How LLMs trained on React could make it the platform by default, drowning new frameworks.
View Transitions in SPAs, command/commandfor attributes, getOrInsert(), and moveBefore().