Advanced CSP: nonces, strict-dynamic and Trusted Types
Why unsafe-inline isn't enough, how CSP nonces and hashes work for a static site, what strict-dynamic is, and what Trusted Types is for.
← Back to Tags
Posts tagged "javascript"
15posts
AbortController: how to cancel a fetch in JavaScript
How to use AbortController and AbortSignal to cancel fetch requests and other async operations, avoiding race conditions and wasted network calls.
WebAuthn and Passkeys: how passwordless authentication really works
How the WebAuthn protocol behind passkeys works — public keys, attestation, a practical example — and why they're not just a more convenient alternative to passwords.
Node.js - January 2026 Security Releases
Security updates for Node.js 25.x, 24.x, 22.x and 20.x: 3 high-severity vulnerabilities, 4 medium and 1 low. Here is what they fix and how to update.
javascript:void(0), what is it?
What javascript:void(0) is and what it's for, with a few simple examples
Proxies in JavaScript
How JavaScript Proxies work, some code examples, and how to use them for reactivity in JS
Decorators in JavaScript
A simple guide to decorators in JavaScript with practical examples
Astro trailing slashes and canonical tags
How to correctly set slashes in URLs and canonical HTML tags for Astro-based applications
React: useActionState and useFormStatus
Let's look at a few examples of how React 19's new useActionState and useFormStatus hooks work
How Error Boundaries work in React, with examples
How Error Boundaries work in React: components that catch errors from their children to improve your app's stability and reliability.
Debounce and Throttle in JavaScript: A Simple Guide
Difference and examples between debounce and throttle for events in JavaScript
React: event handlers and hooks
How to correctly handle event handlers in React, including events on window like resize and scroll, avoiding the most common mistakes.
CSP: how Content Security Policy works
Content Security Policy, or CSP, is a set of rules that tell the browser how to behave when loading the content of our HTML page.
JavaScript: stopPropagation and preventDefault
How stopPropagation and preventDefault work in JavaScript to control event propagation and the browser's default behavior.
TypeScript 5.4: the new NoInfer utility
The new NoInfer<T> utility introduced in TypeScript 5.4 to control generic type inference, with practical examples.