Article
30997 découvertes · Découvertes choisies sur le web ouvert, des plus récentes aux plus anciennes.
-
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We […] The post Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Why is WebAssembly a second-class language on the web?
This post is an expanded version of a presentation I gave at the 2025 WebAssembly CG meeting in Munich. WebAssembly has come a long way since its first release in 2017. The first version of WebAssembly was already a great fit for low-level languages like C and C++, and immediately enabled many new kinds of […] The post Why is WebAssembly a second-class language on the web? appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Firefox Developer Edition and Beta: Try out Mozilla’s .rpm package!
In January, we introduced our Nightly package for RPM-based Linux distributions. Today, we are thrilled to announce it is now available for Firefox Beta! Firefox Beta is great for testing your sites in a version of Firefox that will reach regular users in the coming weeks. If you find any issues, please file them on […] The post Firefox Developer Edition and Beta: Try out Mozilla’s .rpm package! appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Trustworthy JavaScript for the Open Web
The open web is a critical platform for applications that handle highly sensitive data, from private communications to financial transactions and medical records. Traditionally, servers are trusted to deliver the appropriate code and resources for their web applications to browsers, who then provide a secure and isolated environment for their execution. In some circumstances, this […] The post Trustworthy JavaScript for the Open Web appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Behind the Scenes Hardening Firefox with Claude Mythos Preview
Two weeks ago we announced that we had identified and fixed an unprecedented number of latent security bugs in Firefox with the help of Claude Mythos Preview and other AI models. In this post, we’ll go into more detail about how we approached this work, what we found, and advice for other projects on making […] The post Behind the Scenes Hardening Firefox with Claude Mythos Preview appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Announcing Web Serial Support in Firefox
Support for Web Serial in Firefox 151 for Desktop Firefox can now connect directly to microcontrollers, development boards, 3D printers, power meters, and other serial-connected hardware from the web. Starting in Firefox 151 for Desktop, support for the Web Serial API allows web applications to communicate with compatible devices without requiring native software. Web Serial […] The post Announcing Web Serial Support in Firefox appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
PACT: Anonymous Credentials for the Web
This is the technical companion to our update on Distilled, “Keeping the web open and private in the bot era.” Here we take a deeper look at the problem space, the design we’re proposing, and the problems still left to solve. Bots (and privacy-preserving browsers) not welcome Browse a news site in a private window. Shop […] The post PACT: Anonymous Credentials for the Web appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Intent to Ship: JPEG XL
It isn’t often that new image formats land in browsers. In the early 2000s we had JPEG, GIF, and PNG. The 2010s gave us WebP, which was a modest step up from JPEG. But the 2020s have given us two new image formats that are a big step up from previous formats: AVIF and JPEG […] The post Intent to Ship: JPEG XL appeared first on Mozilla Hacks - the Web developer blog .
Mozilla Hacks · EN
-
Virtual Art Museum built with Three js
My wife wanted a website for her artworks. While building the website, I suddenly had this urge to try building a virtual art museum to give her motivation. It turned out not bad. Put the rain mode on if you like cats btw. I'm still trying to optimize the performance as I'm having random fps-drops on Android devices. Let me know if you notice any bugs as this project is still in early build. It works best on PCs although tablets and smart phones are also good to go. I'm open to ideas to make it more beautiful. Comments
Lobsters · EN
-
How Dropbox uses MCP and Dash to close the design-to-code security gap
Using an agentic AI system to surface threat models during code review and spot gaps between security requirements and implementation.
Dropbox Tech · EN
-
How we used DSPy to turn AI evaluations into better responses in Dash chat
We used DSPy to improve LLM judges and optimize our chat experience, creating an evaluation-driven feedback loop that produced better outputs.
Dropbox Tech · EN
-
How our universal content processing platform Riviera evolved for AI and beyond
Riviera is the Dropbox content processing platform that’s been iteratively improving content transformation in our products for roughly a decade.
Dropbox Tech · EN
-
Improving infrastructure efficiency for growing demand in the age of AI
As demand for AI continues to grow, so does the infrastructure needed to support it.
Dropbox Tech · EN
-
Testing cookie behavior across hundreds of web surfaces with our in-house auditor
Our cookie auditor acts like a privacy-conscious user by visiting web pages and checking that they only load cookies consistent with that user’s preferences.
Dropbox Tech · EN
-
Introducing our new Dropbox API documentation
Learn about the newly launched version of the Dropbox API documentation and its modern design and features.
Dropbox Tech · EN
-
Dropbox CTO Ali Dasdan on moving from AI adoption to transformation
Meaningful AI gains depend on rethinking workflows, measuring real outcomes, and keeping human judgment at the center of how work gets done.
Dropbox Tech · EN
-
Evolving our calendar assistant Reclaim to be AI-native without starting over
How we redesigned Reclaim for AI and natural-language requests while preserving the scheduling experience people rely on.
Dropbox Tech · EN