When 3rd party JavaScript attacks

JS Party: JavaScript, CSS, Web Development

Player FM - Internet Radio Done Right

883 subscribers

JavaScript

اضافه شده در nine سال پیش
Looks like the publisher may have taken this series offline or changed its URL. Please contact support if you believe it should be working, the feed URL is invalid, or you have any other concerns about it.

محتوای ارائه شده توسط Changelog Media. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط Changelog Media یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal

Bridechilla - Wedding Planning Podcast

1
444- Eloping is Fun with Jenny Mac 1:06:22

35 weeks پیش1:06:22

پخش در آینده

لیست ها

پسندیدن

دوست داشته شد

1:06:22

Want to ditch the big wedding and elope? This episode's for you! Jenny Mac, creator of New York City-based Eloping is Fun, joins us this week to chat about the next steps after deciding to elope, as well as the creative ways couples are balancing traditions with a more intimate elopement or micro-wedding. Find Eloping is Fun on Instagram at @elopingisfun and their website elopingisfun.com Visit thebridechilla.com for all the latest news! BriteCo: Modern Insurance for Modern Milestones. Visit brite.co/bridechilla/ for a fast, free quote today and unlock peace of mind knowing you're covered. Learn more about your ad choices. Visit megaphone.fm/adchoices…

حدود یک سال پیش 53:15

MP3•خانه قسمت

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on March 07, 2025 14:01 (8M ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Simon Wijckmans from c/side joins Jerod & Nick to discuss the Pollyfill attack in detail. What does it mean for web developers & client-side security going forward?

Join the discussion

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack.

Featuring:

Simon Wijckmans – Website, GitHub, LinkedIn, X
Jerod Santo – GitHub, LinkedIn, Mastodon, X
Nick Nisi – Website, GitHub, Mastodon, X

Show Notes:

The Polyfill attack explained

Something missing or broken? PRs welcome!

فصل ها

1. It's party time, y'all (00:00:00)

2. Hello party people (00:00:56)

3. Welcoming Simon (00:01:23)

4. Hotlinking? Hotlinking! (00:01:47)

5. The Polyfill attack (00:02:56)

6. Nick gets called out (00:11:58)

7. Sponsor: Wix (00:14:52)

https://www.wix.com/studio

8. Reasonable risks (00:15:47)

9. Trust? But, verify (00:19:00)

10. How to verify (00:20:49)

11. Mitigation techniques (00:23:51)

12. Leading from the bottom (00:25:50)

13. Nick gets more secure (00:28:42)

14. What c/side offers (00:29:32)

15. Jerod avenges Nick (00:33:57)

16. Does c/side inject scripts? (00:38:22)

17. What the browsers could do (00:39:49)

18. Consider it cut (00:44:43)

19. Doing better server-side (00:45:31)

20. Ghoulish overkill (00:48:24)

21. Closing time (00:51:16)

22. Next up on the pod (00:51:49)

361 قسمت

#JavaScript #Prog Languages #Jsparty #Web #Programming #Frontend #Backend #Node #Changelog #Changelog Media #Tech #Animation #HTML #CSS #IoT #Robot

When 3rd party JavaScript attacks

JS Party: JavaScript, CSS, Web Development

883 subscribers

published حدود یک سال پیش

اشتراک گذاری

MP3•خانه قسمت

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on March 07, 2025 14:01 (8M ago)

Simon Wijckmans from c/side joins Jerod & Nick to discuss the Pollyfill attack in detail. What does it mean for web developers & client-side security going forward?

Join the discussion

Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!

Sponsors:

Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack.

Featuring:

Simon Wijckmans – Website, GitHub, LinkedIn, X
Jerod Santo – GitHub, LinkedIn, Mastodon, X
Nick Nisi – Website, GitHub, Mastodon, X

Show Notes:

The Polyfill attack explained

Something missing or broken? PRs welcome!

فصل ها

1. It's party time, y'all (00:00:00)

2. Hello party people (00:00:56)

3. Welcoming Simon (00:01:23)

4. Hotlinking? Hotlinking! (00:01:47)

5. The Polyfill attack (00:02:56)

6. Nick gets called out (00:11:58)

7. Sponsor: Wix (00:14:52)

https://www.wix.com/studio

8. Reasonable risks (00:15:47)

9. Trust? But, verify (00:19:00)

10. How to verify (00:20:49)

11. Mitigation techniques (00:23:51)

12. Leading from the bottom (00:25:50)

13. Nick gets more secure (00:28:42)

14. What c/side offers (00:29:32)

15. Jerod avenges Nick (00:33:57)

16. Does c/side inject scripts? (00:38:22)

17. What the browsers could do (00:39:49)

18. Consider it cut (00:44:43)

19. Doing better server-side (00:45:31)

20. Ghoulish overkill (00:48:24)

21. Closing time (00:51:16)

22. Next up on the pod (00:51:49)

361 قسمت

#JavaScript #Prog Languages #Jsparty #Web #Programming #Frontend #Backend #Node #Changelog #Changelog Media #Tech #Animation #HTML #CSS #IoT #Robot

모든 에피소드

1
One last party 1:15:53

38 weeks پیش1:15:53

1:15:53

Jerod is joined by KBall, Nick & Amy to throw one last JS Party! We review last year’s predictions, discuss the state of the web dev world, opine on coding AIs (of course) & divulge what comes next for the JS Party crew. Thank you for partying with us all these years! 💚 Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. WorkOS – AuthKit offers 1,000,000 monthly active users (MAU) free — The world’s best login box, powered by WorkOS + Radix. Learn more and get started at WorkOS.com and AuthKit.com Featuring: Jerod Santo – GitHub , LinkedIn , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Nick Nisi – Website , GitHub , Mastodon , X Amy Dutton – GitHub , X Show Notes: The Dysfunctonal Developer Changelog & Friends Something missing or broken? PRs welcome!…

1
React: then & now 1:13:16

48 weeks پیش1:13:16

1:13:16

Back at React Summit in New York, KBall & Nick sat down with Tom Occhino & Shruti Kapoor for more fascinating conversations. Tom Occhino, a key figure in React’s history at Facebook (now Meta), reveals the origin story of React, which began when an ads engineer presented a revolutionary approach to web UI rendering. The discussion extends to React’s evolution through Next.js. Then, Shruti Kapoor breaks down React 19’s major features, including React Server Components (RSC), the new compiler implementation, and enhanced APIs that promise to streamline development workflows. Join the discussion Changelog++ members save 7 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. WorkOS – AuthKit offers 1,000,000 monthly active users (MAU) free — The world’s best login box, powered by WorkOS + Radix. Learn more and get started at WorkOS.com and AuthKit.com Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Tom Occhino – Website , LinkedIn , X Shruti Kapoor – Website , GitHub , X Nick Nisi – Website , GitHub , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Show Notes: React.js: The Documentary React 19 RC Something missing or broken? PRs welcome!…

1
WYSIWYG 1:17:11

49 weeks پیش1:17:11

1:17:11

At React Summit in New York, KBall & Nick sat down with Kent C. Dodds & Theo Browne for two fascinating conversations. Both of them showed us the whole gamut of their personalities! Kent shared his insights on effective teaching methodologies and the future of developer education, while diving deep into React and the Remix/React Router ecosystem, and closing on an appeal for kindness int he world. Then Theo took us behind the scenes of his developer-focused content creation, from streaming to the origins of the T3 stack, and how his online persona (including T3!) is “just him”. Join the discussion Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today! Sponsors: WorkOS – AuthKit offers 1,000,000 monthly active users (MAU) free — The world’s best login box, powered by WorkOS + Radix. Learn more and get started at WorkOS.com and AuthKit.com Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Kent C. Dodds – Website , GitHub , X Theo Browne – GitHub , LinkedIn , X Kevin Ball – Website , GitHub , LinkedIn , X Nick Nisi – Website , GitHub , Mastodon , X Show Notes: React Summit Epic Web Remix React Router T3 Stack Cursor Something missing or broken? PRs welcome!…

1
Nine pillars of great Node apps 1:04:14

50 weeks پیش1:04:14

1:04:14

Recently, four pillars of the JavaScript community (James Snell, Natalia Venditto, Michael Dawson & Matteo Collina) teamed up to create a resource that lays out nine principles for doing Node.js right in enterprise environments. On this episode, Natalia & Matteo join Jerod to discuss all nine. Join the discussion Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today! Sponsors: Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Natalia Venditto – GitHub , LinkedIn , X Matteo Collina – Website , GitHub , Mastodon , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Show Notes: Nine Node Pillars close-with-grace TypeSpec Something missing or broken? PRs welcome!…

1
It's all about documentation 1:14:21

51 weeks پیش1:14:21

1:14:21

Carmen Huidobro joins Amy, KBall & Nick on the show to talk about her work, the importance of writing docs, and her upcoming conference talk at React Summit US! Join the discussion Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Carmen Huidobro – Website , GitHub , X Nick Nisi – Website , GitHub , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Amy Dutton – GitHub , X Show Notes: Divio Docs for Developers Intuitive Tooling Martin Fowler - if it hurts, do it often Declutter your JavaScript & TypeScript projects | Knip React Summit F*cking Block Syntax Bad Website Club The Annoying Site Something missing or broken? PRs welcome!…

1
How Vercel thinks about Next.js 1:11:47

1 year پیش1:11:47

1:11:47

Vercel CPO, Tom Occhino, joins Jerod for a one-on-one covering React & Next’s past, present & future. We discuss the birth of React, Tom’s move to Vercel, deploying Next apps to non-Vercel hosts, React as the next jQuery, the viability of Web Components, Vercel customers getting surprise bills & so much more. Join the discussion Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Featuring: Tom Occhino – Website , LinkedIn , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Show Notes: React.js: The Documentary - YouTube React, React Native, Flux, Relay, GraphQL (Changelog Interviews #149) Next.js Conf by Vercel v0 by Vercel Something missing or broken? PRs welcome!…

1
Kind of a big deal 1:00:18

1 year پیش1:00:18

1:00:18

Jerod & the gang play “Twenty” Questions to get to know Amy, review the big Svelte 5 release, discuss commercial open source & get Nick’s report from SquiggleConf! Join the discussion Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Featuring: Jerod Santo – GitHub , LinkedIn , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Nick Nisi – Website , GitHub , Mastodon , X Amy Dutton – GitHub , X Show Notes: Svelte 5 is alive Join us at React Summit US (10% off) Join us at JSNation US (10% off) Something missing or broken? PRs welcome!…

1
Digging through Jerod Santo’s tool box 59:02

1 year پیش59:02

59:02

KBall interviews Jerod about the tools he uses in development, podcasting & business. We start with text editors & terminal tools, move to podcast recording & editing tools, discuss the open source podcasting platform Jerod built in Elixir, then finish with tools to run a small business & our approaches to genAI. Oh, and you don’t want to miss Jerod’s Big Confession! Join the discussion Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today! Sponsors: Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Featuring: Kevin Ball – Website , GitHub , LinkedIn , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Show Notes: Nick’s tool box Zed Editor tmux Smug thechangelog/changelog.com Elixir Phoenix Atuin Riverside Adobe Audition Transistor Harvest Freshbooks Gusto Ollama Enchanted Cursor Something missing or broken? PRs welcome!…

1
A great horse to bet on 1:01:30

1 year پیش1:01:30

1:01:30

Jerod & KBall discuss a trio of goings on in/around the web dev world: Evan You’s new startup, Matt Mullenweg’s WordPress mess & Ryan Carniato’s WebComponents debate. Join the discussion Changelog++ members save 7 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Featuring: Jerod Santo – GitHub , LinkedIn , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Show Notes: Join us at React Summit US (10% off) Join us at JSNation US (10% off) Evan You announces VoidZero Automattic Alignment Web Components Are Not the Future Something missing or broken? PRs welcome!…

1
Create interactive tutorials the easy way 51:20

1 year پیش51:20

51:20

Tomek Sułkowski from TutorialKit joins Jerod to tell him all about the open source toolkit for creating awesome, interactive tutorials without having to code up the hard parts. Join the discussion Changelog++ members save 10 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Featuring: Tomek Sułkowski – GitHub , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Show Notes: Running Node natively in the browser with Eric Simons from StackBlitz TutorialKit TutorialKit on GitHub TutorialKit in the wild Welcome to the Vite Plugin API tutorial Welcome to the Remult tutorial Welcome to Next Patterns Something missing or broken? PRs welcome!…

1
Leveling up JavaScript with Deno 2 1:06:16

1 year پیش1:06:16

1:06:16

Jerod is joined by Ryan Dahl to discuss his second take on leveling up JavaScript developers all around the world. Jerod asks Ryan why not try to fix or fork Node instead of starting fresh, how Deno (the open source project) can avoid the all too common rug pull (not cool) scenario, what’s new in Deno 2 & their pragmatic decision to support npm, they talk JSR, they talk Deno KV & SQLite, they even talk about Ryan’s open letter to Oracle in an attempt to free the unused “JavaScript” trademark from the giant’s clutches. Join the discussion Changelog++ members save 3 minutes on this episode because they made the ads disappear. Join today! Sponsors: Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Ryan Dahl – Website , GitHub , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Show Notes: Node.js: The Documentary - YouTube From Node.js to Deno: How It All Began - YouTube 10 Things I Regret About Node.js - YouTube JSR: the JavaScript Registry rusty_v8: Rust bindings for the V8 JavaScript engine JavaScript™ (Dear Oracle) Something missing or broken? PRs welcome!…

1
It's all about the squiggles 1:12:10

1 year پیش1:12:10

1:12:10

Nick is joined by Josh Goldberg & Dimitri Mitropoulos to discuss SquiggleConf, a new conference focused on web dev tooling. We explore the motivations behind creating a conference dedicated to developer tools, the challenges of organizing both conferences and local meetups, and strategies for building engaged tech communities. We also discuss the importance of developer tooling, the pandemic’s impact on tech events, and share insights on encouraging new speakers and creating inclusive environments & more! Join the discussion Changelog++ members save 7 minutes on this episode because they made the ads disappear. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack. Jam.dev – One click bug reports developers love — Never explain another bug report again. Jam auto-captures all the info engineers need to debug and repro. Featuring: Dimitri Mitropoulos – GitHub , LinkedIn Josh Goldberg – GitHub , X Nick Nisi – Website , GitHub , Mastodon , X Show Notes: SquiggleConf ESLint TypeScript ESLint Mocha Learning TypeScript book Michigan TypeScript Boston TS Club NebraskaJS Oh My Zsh (tool by Robbie Russell) React Vue Go programming language TypeScript New England Aquarium conference venue Squiggle Conf Discord Something missing or broken? PRs welcome!…

1
Undirected hyper arrows 1:07:38

1 year پیش1:07:38

1:07:38

Chris Shank has been on sabbatical since January, so he’s had a lot of time to think deeply about the web platform. On this episode, Jerod & KBall pick Chris’ brain to answer questions like, what does a post-component paradigm look like? What would it look like if the browser had primitives for building spatial canvases? How can we make it easier to make “folk interfaces” on the web? Join the discussion Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today! Sponsors: Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Chris Shank – Website , GitHub , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Kevin Ball – Website , GitHub , LinkedIn , X Show Notes: ChrisShank/progressive-element: A set of patterns for a behavioral paradigm of building web UIs Little-Languages/quiver: Your quiver of declarative arrows for the web. ⤵ ChrisShank/folc: Utilities to more easily make folk web pages Something missing or broken? PRs welcome!…

1
Don’t ever use these TypeScript features 49:01

1 year پیش49:01

49:01

Jerod, Nick & Chris discuss a next-gen JavaScript bundler, Node getting even tighter with TypeScript, the top programming languages according to IEEE Spectrum, Chris’ feelings on Node’s built-in test runner & more! Join the discussion Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today! Sponsors: Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs . Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack. Featuring: Jerod Santo – GitHub , LinkedIn , Mastodon , X Nick Nisi – Website , GitHub , Mastodon , X Christopher Hiller – Website , GitHub , Mastodon , X Show Notes: Announcing Rspack 1.0 Node.js — Node v22.7.0 (Current) Top Programming Languages 2024 MoonScript, a language that compiles to Lua TypeScriptToLua Home - Satisfactory Game Nest ’dem loops featuring NESTED LOOPS Song Encoder: $STDOUT The TC39 song Something missing or broken? PRs welcome!…

1
When 3rd party JavaScript attacks 53:15

1 year پیش53:15

53:15

Simon Wijckmans from c/side joins Jerod & Nick to discuss the Pollyfill attack in detail. What does it mean for web developers & client-side security going forward? Join the discussion Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today! Sponsors: Wix – Wix Sudio is for devs who build websites, sell apps, go headless, or manage clients. Integrate, extend and write custom scripts in a VS code-based IDE. Leverage zero set up dev, test and production environments. Ship faster with an AI code assistant. And work with Wix headless API’s on any tech stack. Featuring: Simon Wijckmans – Website , GitHub , LinkedIn , X Jerod Santo – GitHub , LinkedIn , Mastodon , X Nick Nisi – Website , GitHub , Mastodon , X Show Notes: The Polyfill attack explained Something missing or broken? PRs welcome!…

به Player FM خوش آمدید!

Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.

به بیش از 500 موضوع گوش کنید

883 subscribers

مشابه JS Party: JavaScript, CSS, Web Development

Roblox Digital Gift Card - 1,000 Robux [Includes Exclusive Virtual Item] [Digital Code]

TurboTax Desktop Premier 2025, Federal & State Tax Return [Download] [PC/Mac Online Code]

TurboTax Desktop Deluxe 2025, Federal & State Tax Return [Download] [PC/Mac Online Code]

پادکست هایی که ارزش شنیدن دارند

JS Party: JavaScript, CSS, Web Development « » When 3rd party JavaScript attacks

Fetch error

فصل ها

1. It's party time, y'all (00:00:00)

2. Hello party people (00:00:56)

3. Welcoming Simon (00:01:23)

4. Hotlinking? Hotlinking! (00:01:47)

5. The Polyfill attack (00:02:56)

6. Nick gets called out (00:11:58)

7. Sponsor: Wix (00:14:52)

8. Reasonable risks (00:15:47)

9. Trust? But, verify (00:19:00)

10. How to verify (00:20:49)

11. Mitigation techniques (00:23:51)

12. Leading from the bottom (00:25:50)

13. Nick gets more secure (00:28:42)

14. What c/side offers (00:29:32)

15. Jerod avenges Nick (00:33:57)

16. Does c/side inject scripts? (00:38:22)

17. What the browsers could do (00:39:49)

18. Consider it cut (00:44:43)

19. Doing better server-side (00:45:31)

20. Ghoulish overkill (00:48:24)

21. Closing time (00:51:16)

22. Next up on the pod (00:51:49)

When 3rd party JavaScript attacks

Fetch error

فصل ها

1. It's party time, y'all (00:00:00)

2. Hello party people (00:00:56)

3. Welcoming Simon (00:01:23)

4. Hotlinking? Hotlinking! (00:01:47)

5. The Polyfill attack (00:02:56)

6. Nick gets called out (00:11:58)

7. Sponsor: Wix (00:14:52)

8. Reasonable risks (00:15:47)

9. Trust? But, verify (00:19:00)

10. How to verify (00:20:49)

11. Mitigation techniques (00:23:51)

12. Leading from the bottom (00:25:50)

13. Nick gets more secure (00:28:42)

14. What c/side offers (00:29:32)

15. Jerod avenges Nick (00:33:57)

16. Does c/side inject scripts? (00:38:22)

17. What the browsers could do (00:39:49)

18. Consider it cut (00:44:43)

19. Doing better server-side (00:45:31)

20. Ghoulish overkill (00:48:24)

21. Closing time (00:51:16)

22. Next up on the pod (00:51:49)

پادکست هایی که ارزش شنیدن دارند

به Player FM خوش آمدید!

Zevo Flying Insect Trap & 3 Refill Cartridges - Plug in Fly Trap & Indoor Bug Catcher for Gnats, House & Fruit Flies - Blue & UV Light Technology, Mess-Free Alternative to Bug Zapper

2025 Topps Series 1 Baseball - Factory Sealed - Value Box

The Widow: A Novel

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

مشابه JS Party: JavaScript, CSS, Web Development

راهنمای مرجع سریع

JS Party: JavaScript, CSS, Web Development « »
When 3rd party JavaScript attacks