Testing an iframe’s postMessage Handler
There are some real complexities using iframes and the postMessage API for communication between a widget and its parent. Security vulnerabilities like cross-origin scripting risks being one.
There are some real complexities using iframes and the postMessage API for communication between a widget and its parent. Security vulnerabilities like cross-origin scripting risks being one.
Thanks to some very modern CSS, we can visually replicate the logic of scrollbars. Then make them actually functional.
The why and how to get it installed and use it with different models, then actually build something. Plus a little Zod type safety for good measure.
A brand new 2 KB client-side syntax highlighter from Dave. Includes a web component for very easy usage. Maybe these web components have legs, eh? The most interesting part about it is that it doesn’t touch the DOM. It uses the Highlight API to colorize text and TextMate grammars (the same as in VS Code) […]
Websites often hardcode keyboard shortcuts for Mac (⌘) while neglecting Windows users, leading to confusion.
Nice bookmarkable page with classy examples of two-state transitions from Jakub Antalik.
View Transitions block interactivity (like clicks) while they are running. Maybe you don’t want to do that.
Chrome 146 introduced a scoped custom element registry, allowing different versions of custom elements to share the same tag name without using the global namespace.
Jenna Smith with some pretty solid UX advice as it relates to loading states: Rather than designing another loading state, I improve the preload strategy until the issue disappears entirely. She points to Route Transitions and preloading data as solutions that get closer to pages that load everything at once, like a default website, while […]
In which Adam highlights the integration process and notes some challenges compared to the TanStack setup we covered shortly ago.
Master.dev donates to open source projects through thanks.dev and Open Collective, as well as donates to non-profits like The Last Mile, Annie Canons, and Vets Who Code.