Best of CSS-Tricks — December 2021

1. 1
   Article

   CSS-Tricks·4y

   The Invisible JavaScript Backdoor

   An interesting (scary) trick of an nearly undetectable exploit. Wolfgang Ettlinger: What if a backdoor literally cannot be seen and thus evades detection even from thorough code reviews?I’ll post the screenshot of the exploit from the post with the actual exploit circled.

   104

   7
2. 2
   Article

   CSS-Tricks·4y

   Our favorite Chrome extensions of 2021

   Sarem Gizaw lists some of his favorite Chrome extensions. Here are his top picks for the best of the bunch. Some of the most popular include Loom, Dark Reader and Wordtune. Others are less well-known, but some are worth a look.

   43

   9
3. 3
   Article

   CSS-Tricks·4y

   Inertia

   Astro is a server-side version of SvelteKit that lets you use the same syntax as the incumbent, React. Astro uses the Vite compiler and is super fast and pleasant to work with. It lets me write components (in many different frameworks). But it also helps the user here. No more JavaScript bundle on the site at all.

   13

   2
4. 4
   Article

   CSS-Tricks·4y

   HTML Sanitizer API

   The draft report on a Sanitizer API is now in draft stage. It would let the browser clean user input before it is used again on the page. The draft report says:The browser has a fairly good idea of when it is going to execute code. We can improve upon the user-space libraries by teaching the browser how to render HTML from an arbitrary string in a safe manner.

   12

   2