Zhentiw - 博客园

2023年6月23日

摘要： A: Wrong. You should be able to access sub-domain B: Wrong, HttpOnlyCookie can only be set from server side. Securemeans https only; C: Correct. If yo 阅读全文

posted @ 2023-06-23 16:14 Zhentiw 阅读(12) 评论(0) 推荐(0)

[CSS 3] Font Strategies

摘要： font-display: auto; font-display: block; font-display: swap; font-display: fallback; font-display: optional; auto The font display strategy is defined 阅读全文

posted @ 2023-06-23 16:05 Zhentiw 阅读(14) 评论(0) 推荐(0)

[Security] Frontend Security

摘要： XSS (Cross-Site Scripting): XSS is a type of injection security vulnerability where malicious scripts are injected into trusted websites. These script 阅读全文

posted @ 2023-06-23 15:38 Zhentiw 阅读(19) 评论(0) 推荐(0)

2023年6月22日

[HTML 5] Back Forward Cache

摘要： Blog: https://web.dev/bfcache/ bfcache is an in-memory cache that stores a complete snapshot of a page (including the JavaScript heap) as the user is 阅读全文

posted @ 2023-06-22 14:52 Zhentiw 阅读(53) 评论(0) 推荐(0)

[HTML 5] Refer Polices

摘要： Morden browser apply noopenerfor you, but for lagacy browser might not. What noopenerdoes is that, it set window.openerto null, which can prevent evil 阅读全文

posted @ 2023-06-22 14:23 Zhentiw 阅读(13) 评论(0) 推荐(0)

[HTML5] Content Security Policy CSP Header

摘要： default-src "none"; script-src "self"; img-src "self" example.com; style-src fonts.googleapis.com; font-src fonts.gstatic.com; <script src="/js/app.js 阅读全文

posted @ 2023-06-22 14:14 Zhentiw 阅读(43) 评论(0) 推荐(0)

2023年6月21日

[Web] Web Vitals

摘要： 1. Time To First Byte (TTFB): This is a measurement of the responsiveness of a web server. It is the time it takes from the user or client making an H 阅读全文

posted @ 2023-06-21 14:05 Zhentiw 阅读(35) 评论(0) 推荐(0)

2023年6月20日

[CSS 3] CSS Specificity

摘要： So higher rank css will override lower rank css rules. Inline styles will override any other css rules. h1:not(.small-text) // 0011 - :not is not coun 阅读全文

posted @ 2023-06-20 14:30 Zhentiw 阅读(7) 评论(0) 推荐(0)

[Javascript] Event propagation: useCapture for addEventListener

摘要： What gets logged when clicking button? <div id="outer"> <div id="inner"> <button id="btn">Click me!</button> </div> </div> const outer = document.getE 阅读全文

posted @ 2023-06-20 14:10 Zhentiw 阅读(13) 评论(0) 推荐(0)

2023年6月19日

[Typescript 5.2] New Keyword: using

摘要： TypeScript 5.2 will introduce a new keyword - 'using' - that you can use to dispose of anything with a Symbol.dispose function when it leaves scope. T 阅读全文

posted @ 2023-06-19 21:38 Zhentiw 阅读(55) 评论(0) 推荐(0)

Answer1215

公告