Search results

setHTML(), Trusted Types and the Sanitizer API. Ollie Williams explains how the new setHTML() method and Sanitizer API help prevent XSS by safely inserting HTML into the DOM. Combined with the Trusted Types API, they provide a modern, configurable way to control what elements and attributes are allowed, eventually replacing libraries like DOMPurify. Supported in Firefox Nightly and Chrome Canary.

olliewilliams.xyz/blog/sanitiz

Oct 29, 2025. setHTML(), Trusted Types and the Sanitizer API. olliewilliams.xyz
0
0
0

Hello Fediverse, hello Bits&Baeume,

I’ve moved recently, time for a (re)introduction — and a heartfelt Thank You! to @benBen :bub:

I am a writer, copywriter, online editor, and I generally write a lot; I design websites with plain HTML/CSS/JS or using WordPress and other CMS; occasionally I work as a speaker, podcast producer, sound designer — to mention the most important bits.

My blog: wernerprise.com/blog (mostly German, but I am considering making it bilingual at some point.)

Climate catastrophe is on my mind, degrowth close to my heart; capitalism needs a short leash!

Also, I still take SARS-CoV-2 and COVID-19 very seriously. Thus:



0

Hallo Fediverse, hallo Bits&Baeume,

ich bin umgezogen und erst seit ein paar Stunden hier auf dem neuen Server, deswegen eine kurze Vorstellung — und ein herzliches Dankeschön an @benBen :bub:

Ich bin Texter und Online-Redakteur, schreibe auch sonst viel; ich gestalte Websites in HTML, mit WordPress oder anderen CMS, arbeite außerdem gelegentlich als Sprecher, Podcast-Produzent, Sounddesigner – um mal die wesentlichen Dinge genannt zu haben.

Mein Blog: wernerprise.com/blog

Mir liegt die Klimakatastrophe auf der Seele und Degrowth (Décroissance) am Herzen; Kapitalismus braucht straffe Zügel!

Außerdem nehme ich nach wie vor SARS-CoV-2 und COVID-19 ernst. Daher:



0
0
0
0

How does the semantic html community feel about using the <details> element to “expand” into a form submission confirmation, when submitting “dangerous” operations, instead of a <dialog>? Notably, the thing I’m working on is currently fully JS-optional so far, and I would like to keep it that way.

EDIT: Oh it looks like <button> has command and commandfor, which can open a <dialog> now.

EDIT2: oops, but it's not baseline yet, and won't be for a while. It just released in preview for Safari and Firefox. ~sigh~

0
0
0
0

Previously we wrote about Reciprocate, a library for adding signal-based reactivity to server-rendered .

Pretty cool problems to have solved, but what if you wanted more dynamic client-side smarts and the ability to write declarative templates with a trusty html`` function?

Tada! 🎉 Thanks to Joe Pea @trusktrJoe Pea that problem has also been solved. Wire up these two solutions together, and you'll be authoring new UI components using familiar DX. 🙌
thathtml.blog/2025/10/nimble-h

0
0

For those who wanted to see the code behind my CSS-only magical sticky auto-expanding sidebar nav in action, I've put together a little CodePen for you! I've narrowed down the relevant code to just what's needed to get this to work, with some very minimal JavaScript to improve the accessibility of it! I've even left you a little challenge in there for you, let me see how you accomplish it!

codepen.io/Snugug/pen/VYezVKr
mas.to/@snugug/115259058092836

0

I feel that " is purely terrible and should be obliterated from the planet because modern is enough" crowd often miss the role it plays in dictating the weight of importance for new features that flow into native and .

Its right there in chapter four of "HTML5 for Web Designers" (Jeremy Keith)

Developers hack together a solution with and eventually browser vendors go "oh snap, yeah, maybe we *could* just have CSS for popular thing" and out it comes.

You can't have amazing CSS without browser vendors understanding what is important for developers. Its a lovely, beautiful feedback loop.

Screen cap of HTML5 for web designers - with the text highlighted: This is a recurring trend. If a pattern is popular enough, it will almost certainly evolve from requiring a scripted solution to something more declarative. That’s why CSS3 introduces even more animation capabilities that previously required JavaScript.
0

»HTML’s Best Kept Secret — The <output> Tag:
Every developer knows <input>. It’s the workhorse of the web. But <output>? Most have never touched it. Some don’t even know it exists. […]«
— by @denodell

You never stop learning and you can't know everything about as a WebDev. Nice to see how you can use the HTML interface actiev.

🧑‍💻 denodell.com/blog/html-best-ke

0
0
0
0
0
0
0

HTML

One thing I like about XML, and in particular, that XML introduced is —

XML introduced a notation for self-closing (i.e., void) tags.

I.e., the trailing slash

For example:

<img src="..." />

(Note the "/>" at the end of the tag.)

...

From the point of view or someone writing a parser, I liked this convention.

...

I think this would have also been a great UX for custom HTML elements, too. As it would make it so wouldn't have to always include a closing tag.

0
0

🆕 blog! “Targetting specific characters with CSS rules”

You can't. There is no way to use CSS to apply a style to every letter "E". It simply can't be done.

At least, that's what they want you to think…

What if I told you there was a secret and forbidden way to target specific characters in text and apply some styles to them?

As part of my experiments in creating a "drunk" C…

👀 Read more: shkspr.mobi/blog/2025/09/targe

0
0
0

Bit late for a , but better late than never.

I'm a high school student. I'm a farm kid, interested in

I'm and had the opportunity to visit the pre-covid.

I'm politically , willing to talk to people who disagree, but not interested in political arguments.

I'm interested in and . Currently running with on my main machine. I've played with on . Do some programming: I'm not bad with , okay with

I also make . Mostly farm life, but I make videos for my clubs, church, school projects, too. I fly a , and use a . Still have a lot to learn, but I'm pretty proud of my work.

0
0
0
0
0
0
0

Is your website missing out on one of ’s easiest yet most powerful tools? The lang attribute takes just seconds to add, but it makes a massive difference for , SEO, and how your content displays. @webi18nW3C Internationalization, i18n

In this video, @xfqFuqiao Xue, who leads @w3cWorld Wide Web Consortium's activity, breaks down exactly what the language attribute does and demonstrate why skipping it can have real consequences. @webi18nW3C Internationalization, i18n

🎬 youtu.be/G3OwTPJo_Kw

Chinese vs Japanese font comparison for the Unicode character "U+76F4" (meaning "straigth, direct, honest"). The kanji is displayed differently in Chinese (lang="zh-Hans") and Japanese (lang="ja")
0

Definisjonsliste, type HTML

Fra HTML-standardens eksempler for dl-elementet

Café ou Chocolat Liégeois
3.50 <data itemprop="priceCurrency" value="EUR">€</data>
2 boules Café ou Chocolat, 1 boule Vanille, sauce café ou chocolat, chantilly
Américaine
3.50 <data itemprop="priceCurrency" value="EUR">€</data>
1 boule Crème brûlée, 1 boule Vanille, 1 boule Caramel, chantilly

eller

Apartment, n.
An execution context grouping one or more threads with one or more COM objects.
Flat, n.
A deflated tire.
Home, n.
The user’s login directory.
0

@nixCraftnixCraft 🐧 Hm.
<3h later> 💾 💻 :computerfairies:

I wrote myself a "tool" using 3 languages (all none C#)-based to resolve and translate "proficient" to my language.

Then I nodded & smiled, while inventing `$poems-o-code` in whitespace-and-esoteric-languages: brain-and-🤪f*ck
meets Shakespeare;

github.com/imihajlow/emojifuck

Slowly coming down: From Python to Perl to Ba(t)sh - then Markup, then -down, 1-2-3-4-5 even then
{ pause(); }

Eh...
> What was your question again?
> 🤓 😎 ❓

0

Introduction

Graduate work - Comparative Literature at U of in the early 90s; first forays into World Wide Web
lachance.artsci.utoronto.ca

Landed a position in the civil service; kept abreast of humanities computing ( aka ) via Humanist Discussion List
dhhumanist.org

Known for in the
cogdogblog.com/2003/11/bloggin

Later settling up a of my own "Berneval" on
berneval.hcommons.org

Learnt by hand coding my
lachance.artsci.utoronto.ca/BR

Happy to have observed over the course of the years that the world over has become more porous and to those that are . Happy too to have used as "to think is often to sort, to store and to shuffle: humble, embodied tasks".




Looking forward to the fostered by the ... to us all.

0

"One notable difference between and is the case of “Gray” and its variants.

In , “Gray” is specifically reserved for the 128 triplet (50% gray). However, in X11, “gray” was assigned to the 190 triplet (74.5%), which is close to W3C “Silver” at 192 (75.3%), and had “Light Gray” at 211 (83%) and “Dark Gray” at 169 (66%) counterparts.

As a result, the combined 3.0 color list that prevails on the web today produces “Dark Gray” as a significantly lighter tone than plain “Gray”, because “Dark Gray” was descended from X11 – for it did not exist in HTML nor CSS level 1 – while “Gray” was descended from HTML."

0
0

Dear Mastodon,

I am writing to tell you all about my wonderful and brand new HW HTML Drafting Project. It is an drafting software that works directly inside of the browser. It is available on GitHub at:

github.com/dckimMysteryAuthor/

It is also available in the form of a full featured demo at both:

dckim.com/HW_project_online.ht

and

HDUB.neocities.org

It's a wonderful program used to draw HTML just like a traditional drafting program.

Keyboard Like VI, Drag Images In

-dckimGUY

0

What about using rel="share-url" to expose sharing intents?

shkspr.mobi/blog/2025/08/what-

<html><head></head><body>

Let's say that you've visited a website and want to share it with your friends. At the bottom of the article is a list of popular sharing destinations - Facebook, BlueSky, LinkedIn, Telegram, Reddit, HackerNews etc.

Screenshot. "Share this page on" followed by colourful icons for popular social networks.

You click the relevant icon and get taken to the site with the sharing details pre-filled.

Screenshot of the Telegram sharing page.

The problem is, every different site has a different intent for sharing links and text. For example:

  • https://www.facebook.com/sharer.php?u=…&t=…
  • https://www.linkedin.com/sharing/share-offsite/?url=…
  • https://bsky.app/intent/compose?text=…
  • https://www.threads.net/intent/post?url=…&text=…
  • https://www.reddit.com/submit?url=…&title=…

As you can see, some only allow a URL, some text and a URL, and some just a plain text which could contain the URl. A bit of a mess! It's probably impossible to get every site to agree on a standard for their sharing intent. But there could be a standard for exposing their existing sharing mechanism.

That's the proposal from Ben Werdmuller with "Share Openly".

ShareOpenly knows about most major social networks, as well as decentralized platforms like Mastodon, Bluesky, and Known.

However, if ShareOpenly is having trouble sharing to your platform, and if your platform supports a share intent, you can add the following metatag to your page headers:

<link rel="share-url" href="https://your-site/share/intent?text={text}">

Where https://your-site/share/intent?text= is the URL of your share intent.

The special keyword {text} will be replaced with the URL and share text.

I think that's a pretty nifty solution.

For sites which take a URl and an (optional) title, the meta element looks like:

 HTML<link rel="share-url" href="https://www.facebook.com/sharer.php?u={url}&t={text}"><link rel="share-url" href="https://lemmy.world/create_post?url={url}&title={text}">

For those which only take URl, it looks like:

 HTML<link rel="share-url" href="https://www.linkedin.com/sharing/share-offsite/?url={url}">

It's slightly trickier for sites like Mastodon and BlueSky which only have a text sharing field and no separate URl. The current proposal is just to use the text. For example

 HTML<link rel="share-url" href="https://bsky.app/intent/compose?text={text}">

But it could be something like

 HTML<link rel="share-url" href="https://mastodon.social/share?text={text}%0A{url}">

What Next?

The HTML specification has this to say about adding new link types:

Extensions to the predefined set of link types may be registered on the microformats page for existing rel values.

Adding to that page merely requires a formal specification to be written up. After that, some light lobbying might be needed to get social networks to adopt it.

So, I have three questions for you:

  1. Do you think <link rel="share-url" is a good idea for a new standard?
  2. What changes, if any, would you make to the above proposal?
  3. Would you be interested in using it - either as a sharer or sharing destination?

Please leave a comment in the box - and remember to hit those sharing buttons!

</body></html>

0
0

Hello!

I am an artist and professor of Creative Technologies at Virginia Tech. In my work, I focus on the ways technologies of visualization and control intersect with and threaten lives.

I work in , , , , and more. Lately I have been doing a lot of for my projects and in my teaching.

Earlier this year, I combined my / / teaching resources into a single (free and open) site that I am really proud of:

byhand.website

I am also interested in , , , , , , , , , and .

0
0
0