inian

9 ms·

121.
by inian 10y ago
CSP is supposed to protect the website when there is a xss in it as a defence in depth solution. So a CSP bypass is when, it fails to do so. #1 - this is true for any site using CSP with javascript. #3 - the site is not giving the ability
122.
Bypassing CSP using polyglot JPEGs(blog.portswigger.net)
43 points by inian 10y ago|15 comments
123.
Tool to help find fallback font to minimize FOUT(meowni.ca)
2 points by inian 10y ago|0 comments
124.
by inian 10y ago
It is not as simple as that. Even if videos are prevented from being auto-playing, people resort to much much worse techniques. For example, GIFs - which are much bigger that the corresponding video, worse for battery life etc. To combat th
125.
Window.prompt() will not activate parent page(groups.google.com)
2 points by inian 10y ago|0 comments
126.
by inian 10y ago
Lol I thought the article was about Hillary
127.
by inian 10y ago
We also realised that tackling web performance takes a lot of effort..so have been building different tools which can automate front end optimization techniques. Our recent tool ( https://dexecure.com ) tackles image optimization
128.
by inian 10y ago
The you don't need jQuery website had a concrete use case - you need not include an entire library into your website for some simple tasks which makes your website faster. Though, this site is cool in showing the power of CSS, I am not
129.
by inian 10y ago
This article can probably be renamed to "why Javascript is bad"..only patents and dependencies issues were related to react native..the rest of the article was about how Javascript sucks..and I think developers are already equippe
130.
Introducing Windows Defender Application Guard for Microsoft Edge(blogs.windows.com)
61 points by inian 10y ago|57 comments
131.
by inian 10y ago
The article is from 2014. Though I understand the sentiment, most of the facts are false now IIRC, Chrome was using the FileSystem API which was supported only in Chrome - hence the partial support for offline functionality in Google docs..
132.
Chrome Safe Browsing Blocks Piratebay as Harmful(thepiratebay.org)
2 points by inian 10y ago|1 comments
133.
Beyond Offline: Other Interesting Use Cases with Service Workers(blog.dexecure.com)
2 points by inian 10y ago|0 comments
134.
by inian 10y ago
Support for this attribute is modern browsers is good but it is never used unless you visit the image directly via its URL or the like..It is going to be of no use when you embed the image in a webpage..Lot of times, I do a right-click -&gt
135.
by inian 10y ago
Yup, I have covered this use case in the article
136.
by inian 10y ago
I just looked at JPEG files for this..should look at PNG files too..hopefully things are much better than that image you posted haha
137.
by inian 10y ago
Agreed, in those cases preserving the metadata might be the way to go depending on your use case. You just need to be aware of the trade off you are making..
138.
by inian 10y ago
Yup this information is indeed useful for a lot of cases (for photo editing software, etc.)..But for images delivered on the web it makes sense to preprocess them to strip off the EXIF data since it is mostly not used by browsers.
139.
by inian 10y ago
AFAIK Google doesn't use this data for indexing or SEO purposes..
140.
Impact of metadata on Image Performance(blog.dexecure.com)
45 points by inian 10y ago|17 comments
141.
HEIST: HTTP Encrypted Information Can Be Stolen Through TCP-Windows [video](youtube.com)
2 points by inian 10y ago|0 comments
142.
by inian 10y ago
Yup, just that your fast loading web page won't get the special treatment that AMP pages get on the search results page
143.
Proposal for Async cookies(github.com)
2 points by inian 10y ago|0 comments
144.
Component Rendering Performance in React(medium.com)
1 points by inian 10y ago|0 comments
145.
How SOASTA, Google used machine learning to predict bounce rate and conversions(soasta.com)
2 points by inian 10y ago|0 comments
146.
by inian 10y ago
One case where proxies are useful is when you do not know the properties of an Object before hand. Object.defineProperty cannot help you there..
147.
Use cases for ES6 proxies(devbryce.com)
83 points by inian 10y ago|32 comments
148.
Apple tests Google graphics format to speed up websites(cnet.com)
1 points by inian 10y ago|0 comments
149.
by inian 10y ago
Would be interesting to carry out a comparison with the MozJpeg format..
150.
WebP is now supported on Safari 10(groups.google.com)
3 points by inian 10y ago|0 comments

More ›