一年两个高危CVE，React/Next.js的问题不是SSR，是前端被逼着干后端的活 CVE年年有，今年特别多，这不稀奇。什么时候开始一个”前端框架”的漏洞，能造成这么大的攻击面了？ 2015年的React就是个View层的库，Virtual DOM diff一下完事儿。现在你点开Next.js的文档看看，Server Components、Server ...

API contracts are not the enemy. They are extremely good at what they are designed to do. These problems only appear when real responses flow through real components. That is an integration problem, ...

These four reactive frameworks are all popular options for building dynamic, scalable web apps in JavaScript. Here's help choosing the right one for you. The last time I compared the leading reactive ...

Astro is a full-stack JavaScript meta-framework that orchestrates reactive view technologies like React and Svelte. While there are numerous meta-frameworks (examples include Next.js and Remix), Astro ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library to its Known Exploited Vulnerabilities ...

What is the Vue Design System? Vue Design System is an open source tool for building UI Design Systems with Vue.js. It provides you and your team a set of organized tools, patterns & practices that ...

Your browser does not support the audio element. In 2020, I revisited the topic and published an updated version on my blog. However, that too has become outdated ...