Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 – Mozilla Hacks - the Web developer blog
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We expect other browsers to follow soon. An XS
Why is WebAssembly a second-class language on the web? – Mozilla Hacks - the Web developer blog
This post is an expanded version of a presentation I gave at the 2025 WebAssembly CG meeting in Munich. WebAssembly has come a long way since its first release in 2017. The first version of WebAssembly was already a great fit for low-level languages like C and C++, and immediately enabled many new kinds of applications to efficiently target the web. Since then, the WebAssembly CG has dramatically
ã€WebF】React/Vue/SvelteãŒãã®ã¾ã¾ãƒã‚¤ãƒ†ã‚£ãƒ–アプリã«ãªã‚‹ã‚ˆ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ã“ã®æ‰‹ã®è©±ã‚’ã‚‚ã†ä½•ä¸‡å›žèžã„ãŸã‹ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€GitHubリãƒã‚¸ãƒˆãƒªã®ã‚³ãƒŸãƒƒãƒˆæ•°ã‚„é »åº¦ã‚’è¦‹ã‚‹ã«ã‹ãªã‚Šã®æœ¬æ°—度を感ã˜ã¾ã™ã€‚ ãã‚“ãªã‚ã‘ã§JavaScriptã‚’ãã®ã¾ã¾ãƒã‚¤ãƒ†ã‚£ãƒ–アプリã«ã™ã‚‹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ã²ã¨ã¤ã€OpenWebFãŒãƒ™ãƒ¼ã‚¿ç‰ˆã«åˆ°é”ã—ãŸã‚ˆã†ã§ã™ã€‚ 以下ã¯å…¬å¼ãƒ–ãƒã‚°ã€Introducing WebF Beta: Bring JavaScript and the Web dev to Flutterã®ç´¹ä»‹ã§ã™ã€‚ Introducing WebF Beta: Bring JavaScript and the Web dev to Fl
Web æ¨™æº–å‹•å‘ 2026å¹´1月版
ã“ã‚“ã«ã¡ã¯ï¼ ã‚µã‚¤ãƒœã‚¦ã‚ºæ ªå¼ä¼šç¤¾ フãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã® mehm8128 (@mehm8128) ã§ã™ã€‚ ã¯ã˜ã‚㫠サイボウズ㯠2025 å¹´ 4 月よりã€W3C ã®ãƒ¡ãƒ³ãƒãƒ¼ã«åŠ å…¥ã—ã¾ã—ãŸã€‚ 標準化プãƒã‚»ã‚¹ã«é–¢ã‚ã‚‹ã“ã¨ãŒã§ãるよã†ã«ãªã‚‹ãŸã‚ã®æœ€åˆã®ä¸€æ©ã¨ã—ã¦ã€ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ä¸€éƒ¨ã®ãƒ¡ãƒ³ãƒãƒ¼ã¯ç©æ¥µçš„ã« Web 標準ã®ã‚ャッãƒã‚¢ãƒƒãƒ—ã‚’è¡Œã£ã¦ã„ã¾ã™ã€‚ ãã“ã§ã€æ¯Žæœˆãƒ¡ãƒ³ãƒãƒ¼ãŒèˆˆå‘³ã‚’æŒã£ãŸ Web 標準ã«é–¢ã™ã‚‹è©±é¡Œã‚„ã€å®Ÿéš›ã«æ¨™æº–化プãƒã‚»ã‚¹ã«é–¢ã‚ã‚‹ã“ã¨ãŒã§ããŸå ´åˆã«ã¯ãã®å ±å‘Šãªã©ã‚’ 1 ã¤ã®è¨˜äº‹ã¨ã—ã¦ã¾ã¨ã‚ã€ç´¹ä»‹ã—ã¦ã„ãã¾ã™ã€‚ ã¾ãŸã€ã“ã“ã§ã¯ W3C ã«é™ã‚‰ãšã€TC39 ã‚„ WHATWG ãªã©ã®æ¨™æº–化団体ã®ãƒˆãƒ”ックã«ã¤ã„ã¦ã‚‚扱ã„ã¾ã™ã€‚ HTML Blink: Prototype: Canvas text writing mode support Canvas 上ã§ã®ãƒ†ã‚ストæç”»ã«ãŠã„ã¦
ã€JavaScript】ES2026ã®æ–°æ©Ÿèƒ½å…¨éƒ¨è§£èª¬ã™ã‚‹ - Qiita
JavaScriptã®ä»•æ§˜ã¯ã€TC39ã¨ã„ã†ã¨ã“ã‚ã§æ±ºã‚られã¦ã„ã¾ã™ã€‚ ブラウザベンダや関係者ãŒå®šæœŸçš„ã«ä¼šåˆã‚’è¡Œã„ã€æ§˜ã€…ãªæ–°æ©Ÿèƒ½ã«ã¤ã„ã¦è©±ã—åˆã£ã¦ä»Šå¾Œã®JavaScriptã®æ–¹å‘性を決ã‚ã¦ã„ãã¾ã™ã€‚ ã“ã“ã§ã¯2025å¹´ã«Finishedã«ãªã£ãŸproposalã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã¿ã¾ã™ã€‚ 『Finishedã«ãªã£ãŸã€ã®å®šç¾©ã¯ã€ç¾åœ¨ã§ã¯Chrome・Firefox・Safariã®ã†ã¡2ã¤ä»¥ä¸Šã«å®Ÿè£…ã•ã‚ŒãŸã€ã¨ã„ã†æ„味ã ã¨æ€ãˆã°ã ã„ãŸã„åˆã£ã¦ã„ã¾ã™ã€‚ ã™ãªã‚ã¡ã€ä¸»è¦ãƒ–ラウザã§ã¯æ—¢ã«ã»ã¨ã‚“ã©ã®æ©Ÿèƒ½ã‚’使用å¯èƒ½ä½•æ°—ã«Chromeã ã‘対応ã—ã¦ãªã„ã®ãŒå¤šã„ã§ã™ã€‚ Finished Proposals JSON.parse source text access JSON.parseã®å¼•æ•°reviverã«ã€ãƒ‘ラメータcontextã‚’è¿½åŠ ã—ã¾ã™ã€‚ JSON.parseã¯æ•°å€¤åž‹æ–‡å—列を数値ã«ã—ãŸã‚Šã¨ä¸€éƒ¨ã®åž‹ã‚’å‹æ‰‹ã«å¤‰
Biome 㨠Git/GitHub を活用ã—ãŸJSãƒãƒ³ãƒ‰ãƒ«å·®åˆ†è¡¨ç¤ºãƒ„ールã®é–‹ç™º - Techtouch Developers Blog
ã“ã‚“ã«ã¡ã¯ï¼ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã® all-user ã§ã™ã€‚ 最近ã€å®¶æ—全員ã§å¤œ9時以é™ã‚’ç·©ã‚ã®ãƒ‡ã‚¸ã‚¿ãƒ«ãƒ‡ãƒˆãƒƒã‚¯ã‚¹æ™‚é–“ã«ã—ã¦ã¿ã¾ã—ãŸã€‚ ã‚„ã£ã¦ã¿ã‚‹ã¨ã‚ªã‚»ãƒã¨ã‹ãƒˆãƒ©ãƒ³ãƒ—ã¿ãŸã„ãªã‚¢ãƒŠãƒã‚°ãªéŠã³ã‚’模索ã™ã‚‹ã‚ˆã†ã«ãªã‚‹ã®ãŒé¢ç™½ã„ã§ã™ã€‚ ã•ã¦ä»Šå›žã¯ã€Biome 㨠Git/GitHub を活用ã—ãŸJSãƒãƒ³ãƒ‰ãƒ«å·®åˆ†è¡¨ç¤ºãƒ„ールã«ã¤ã„ã¦ã”紹介ã—ã¾ã™ã€‚ フãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰é–‹ç™ºè€…ãŒæŠ±ãˆã‚‹æ¼ 然ã¨ã—ãŸä¸å®‰ æ—¢å˜ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¤œè¨Ž 差分表示ツールã®è¨è¨ˆ 基本アイデア ブランãƒã®é‹ç”¨æ–¹æ³• ③ベースビルトブランム④ç¾åœ¨ãƒ“ルトブランム⑤PR作æˆãƒ–ランム比較基準点ã®æ±ºå®š 全体ワークフãƒãƒ¼ å°Žå…¥ã®åŠ¹æžœ レビューå“質ã®å‘上 レガシーè¨å®šã®å‰Šé™¤ãŒå®¹æ˜“㫠予測ã¨çµæžœã®ä¸€è‡´ç¢ºèª JSファイル以外ã®æˆæžœç‰©å·®åˆ†ã‚‚å¯è¦–化 実装上ã®å·¥å¤« Biome ã«ã‚ˆã‚‹é«˜é€Ÿãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆ Git ã® Tree Hash ベースã®ã‚ャッシュ戦略 マルãƒ
ã€çµ¶å¯¾ãƒ€ãƒ¡ã€‘node:vmモジュールをサンドボックスã¨ã—ã¦ä½¿ã£ã¦ã¿ãŸï¼ï¼ï¼ï¼
ã“ã‚“ã«ã¡ã¯ã€t-chenã§ã™ã€‚ [1] çªç„¶ã§ã™ãŒã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã§èª°ã§ã‚‚利用ã§ãã‚‹Node.js環境を準備ã—ã¾ã—ãŸã€‚vmモジュールを利用ã—ã¦ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹åŒ–ã—ãŸã®ã§ã€å®‰å…¨ãªã¯ãšã§ã™ã€‚普段é£ã„ã—ã¦ã„ã¦ã„ã‚ã„ã‚ãªæƒ…å ±ãŒè©°ã¾ã£ãŸPCã§ã‚µãƒ¼ãƒãƒ¼ã‚’å‹•ã‹ã—ã¦ã„ã¾ã™ãŒã€å¤§ä¸ˆå¤«ã§ã—ょã†ã€‚ ... [2] ã†ã‚〜〜〜〜〜〜〜〜〜〜〜〜〜〜〜〜〜ãƒãƒƒã‚ングã•ã‚ŒãŸã€œã€œã€œã€œã€œã€œã€œã€œã€œã€œã€œ VMモジュールã¨ã¯ï¼Ÿ 外部ã‹ã‚‰å—ã‘å–ã£ãŸJavaScriptを実行ã—ãŸã„ã€ã¨ã„ã†ãƒ‹ãƒ¼ã‚ºã¯å¸¸ã«ä¸€å®šæ•°ã‚ã‚Šã¾ã™(競技プãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã®è¨ˆæ¸¬ã‚µãƒ¼ãƒãƒ¼ã€LLMãŒå®Ÿé¨“çš„ã«å®Ÿè¡Œã§ãる環境ãªã©)。ã—ã‹ã—ã€ãã‚Œã«ã¯å¸¸ã«æ‚ªæ„ã®ã‚るコードを実行ã•ã‚Œã¦ã—ã¾ã†ã¨ã„ã†ãƒªã‚¹ã‚¯ãŒã¤ã„ã¦ã—ã¾ã„ã¾ã™ã€‚ä»»æ„ã®JavaScriptを安全ã«å®Ÿè¡Œã™ã‚‹ãŸã‚ã®ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã¨ã¯ã©ã®ã‚ˆã†ã«å®Ÿè£…ã§ãã‚‹ã§ã—ょã†ã‹ã€‚ Node.jsã«ã¯ã€node:vmã¨ã„ã†ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã¯
å†å¸°ã‚„ループを使ã‚ãšã«çµ„åˆã›ã‚’求ã‚ã‚‹
const nextCombination = x => { const a = x & -x; const b = a + x; return (((b ^ x) / a) >> 2) + b; }; ã¾ãšï¼Œx ã¨ãã®ç¬¦å·ã‚’å転ã—㟠-x ã®è«–ç†ç©ã‚’求ã‚ã¾ã™ï¼Žã“ã‚Œã¯ï¼Œæœ€ã‚‚å³ã«ã‚ã‚‹ 1 ã ã‘を残ã—ã¦æ®‹ã‚Šã®æ¡ã‚’全部 0 ã«ã™ã‚‹æ“作ã§ã™ï¼Žä¾‹ãˆã°ï¼Œè¦–野を 8 bit ã«ã—㦠x ã‚’ 0011 1000 ã¨ç½®ãã¨ã—ã¾ã™ï¼Žç¬¦å·ã‚’å転ã•ã›ãŸ -x ã¯ï¼Œ2 ã®è£œæ•°è¡¨ç¾ã«ã‚ˆã‚Š 1100 1000 ã¨ãªã‚Šã¾ã™ï¼Žã“ã®äºŒã¤ã®è«–ç†ç©ã‚’求ã‚ã‚‹ã¨ï¼Œæœ€ã‚‚å³å´ã® 1 ã ã‘ãŒéƒ½åˆã‚ˆã残ã£ã¦ 0000 1000 ãŒå¾—られã¾ã™ï¼Žã“れを a ã¨ã—ã¾ã™ï¼Ž 次ã«ï¼Œa㨠x ã®å’Œã‚’求ã‚㦠b ã¨ã—ã¾ã™ï¼Žå…ˆç¨‹ã¨åŒæ§˜ã« 8 bit ã®ä¾‹ã§è€ƒãˆã¦ã¿ã¾ã™ï¼Ža㨠x，ã¤ã¾ã‚Š 0000 1000 㨠0011 1000 を足ã—åˆã‚ã›ã‚‹ã¨ 0100
TanStack Start
Full-stack Framework powered by TanStack Router for React and SolidFull-document SSR, Streaming, Server Functions, bundling and more, powered by TanStack Router and Vite - Ready to deploy to your favorite hosting provider. Built on TanStack Router, Start comes pre-packed with a fully type-safe and powerfully-unmatched routing system that is designed to handle the beefiest of full-stack routing req
"use client" 㯠JavaScript 標準ã§ã¯ãªã„ - 「出所ä¸æ˜Žã€ãªæ–‡å—列ãŒéš ã™ãƒªã‚¹ã‚¯
ã¯ã˜ã‚ã« "use client" ã‚„ "use server" ã¨ã„ã£ãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯ã€React Server Components（RSC）ã®æ™®åŠã¨ã¨ã‚‚ã«åºƒã使ã‚れるよã†ã«ãªã‚Šã¾ã—ãŸã€‚一見ã™ã‚‹ã¨ã€ã“れら㯠JavaScript ã®æ¨™æº–機能ã§ã‚ã‚‹ "use strict" ã®ã‚ˆã†ã«è¦‹ãˆã¾ã™ãŒã€å®Ÿéš›ã«ã¯æ ¹æœ¬çš„ã«ç•°ãªã‚‹ã‚‚ã®ã§ã™ã€‚ TanStack ã®ä½œè€…ã§ã‚ã‚‹ Tanner Linsley æ°ã¯ã€ãƒ–ãƒã‚°è¨˜äº‹[1]ã§ã€ã“れらã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ãŒæ–°ã—ã„å½¢ã®ãƒ•ãƒ¬ãƒ¼ãƒ ワークãƒãƒƒã‚¯ã‚¤ãƒ³ã‚’生ã¿å‡ºã—ã¦ã„ã‚‹ã¨è¦é˜ã‚’鳴らã—ã¦ã„ã¾ã™ã€‚ディレクティブã¯é–‹ç™ºè€…体験をå‘上ã•ã›ã‚‹ä¸€æ–¹ã§ã€æ¨™æº–化ã•ã‚Œã¦ã„ãªã„独自仕様ã§ã‚ã‚Šã€ã‚¨ã‚³ã‚·ã‚¹ãƒ†ãƒ ãŒåˆ†æ–ã•ã‚ŒãŸã‚Šã€ä»–ã®ãƒ•ãƒ¬ãƒ¼ãƒ ワークã¸ã®ä¹—ã‚Šæ›ãˆãŒé›£ã—ããªã£ãŸã‚Šã¨ã„ã£ãŸé•·æœŸçš„ãªãƒªã‚¹ã‚¯ã‚’å•ã‚“ã§ã„ã¾ã™ã€‚ 本記事ã§ã¯ã€Tanner Linsley æ°ã®ãƒ–ãƒã‚°è¨˜äº‹ã¨é–¢é€£ã™ã‚‹è°è«–ã‚’ã‚‚ã¨ã«ã€ä»¥ä¸‹ã®
GitHub - cloudflare/capnweb: JavaScript/TypeScript-native, low-boilerplate, object-capability RPC system
Cap'n Web is a spiritual sibling to Cap'n Proto (and is created by the same author), but designed to play nice in the web stack. That means: Like Cap'n Proto, it is an object-capability protocol. ("Cap'n" is short for "capabilities and".) We'll get into this more below, but it's incredibly powerful. Unlike Cap'n Proto, Cap'n Web has no schemas. In fact, it has almost no boilerplate whatsoever. Thi
異世界JavaScript
最近ã¯ç•°ä¸–界転生もçã—ããªããªã‚Šã¾ã—ãŸã€‚ã‚‚ã—も異世界ã«JavaScriptãŒã‚ã£ãŸã‚‰ã€ãã‚Œã¯æˆ‘々ã®çŸ¥ã‚‹JavaScriptã¨ã©ã†é•ã†ã§ã—ょã†ã‹ï¼Ÿ ã“ã®è¨˜äº‹ã§ã¯ã€ECMAScriptã¾ãŸã¯ãã®äºœç¨®ã«å®Ÿè£…ã•ã‚ŒãŸæ©Ÿèƒ½ã§ã€æ¨™æº–化ã«è‡³ã‚‰ãªã‹ã£ãŸã‚‚ã®ã‚’å–り上ã’ã¾ã™ã€‚モダンãªECMAScriptã—ã‹çŸ¥ã‚‰ãªã„æ–¹ã«ã¯ã€ãã£ã¨ç•°ä¸–界を見るよã†ã«æ–°é®®ã«æ„Ÿã˜ã¦ã„ãŸã ã‘ã‚‹ã“ã¨ã¨æ€ã„ã¾ã™ã€‚ 異世界㮠typeof 演算å 「13.5.3 The typeof Operator - ECMAScript® 2025 Language Specificationã€ã«ã‚ˆã‚‹ã¨ã€typeof 演算åã®è¿”ã—ã†ã‚‹å€¤ï¼ˆæ–‡å—列）㯠undefined object string symbol boolean number bigint function ã®ã¡ã‚‡ã†ã©8通りã§ã™ã€‚ã—ã‹ã—ã€ç•°ä¸–ç•Œã®JavaScriptã§ã¯ typeof ãŒã“
å¤ä¼‘ã¿ã®çµ‚ã‚ã‚Šã“ã復習ã—ã¦ãŠããŸã„ã€ES2016以é™ã®ãƒ¢ãƒ€ãƒ³JavaScriptå†å…¥é–€
ã¯ã˜ã‚ã« å¤ã‚‚終ã‚ã‚Šã«è¿‘ã¥ã„ã¦ãã¾ã—ãŸã。ã¿ãªã•ã‚“å¤ä¼‘ã¿ã¯ã„ã‹ãŒãŠéŽã”ã—ã§ã—ょã†ã‹ï¼Ÿæµ·ã«å±±ã«ã€ã¯ãŸã¾ãŸã‚¨ã‚¢ã‚³ãƒ³ã®åŠ¹ã„ãŸéƒ¨å±‹ã§JavaScriptã§ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ä¸‰æ˜§ã‚‚アリã‹ãªã¨æ€ã£ãŸã‚Šã‚‚ã—ã¾ã™ã€‚ã¨ã“ã‚ã§ã€ã‚³ãƒ¼ãƒ’ー片手ã«ã‚³ãƒ¼ãƒ‰ã‚’書ããªãŒã‚‰ã€ã€Œã†ã‚ã£...ç§ã®JavaScriptã€å¤ã™ãŽãªã„...？ã€ã¨ãµã¨æ€ã£ãŸã“ã¨ãŒã‚ã‚Šã¾ã›ã‚“ã‹ï¼Ÿ ECMAScript 6(以下ES6)ãŒæ£å¼ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸ2015å¹´ã‹ã‚‰ã‹ã‚Œã“ã‚Œ10年も経ã¡ã¾ã—ãŸã。ES6ã¯Promiseã€ã‚¯ãƒ©ã‚¹æ§‹æ–‡ã‚„ã‚¢ãƒãƒ¼é–¢æ•°ãªã©å¼·åŠ›ãªæ©Ÿèƒ½ã‚’一気ã«å°Žå…¥ã—ã¾ã—ãŸã€‚ES3ã‹ã‚‰ç´„10å¹´é–“ã§æ¨™æº–仕様ã®ç–定ãŒã»ã¼åœæ»žçŠ¶æ…‹ã ã£ãŸJavaScriptã«ã¨ã£ã¦èµ·æ»å›žç”Ÿã¨è¨€ã£ã¦ã‚‚éŽè¨€ã§ã¯ãªã„節目ã§ã—ãŸã€‚ ã‚‚ã—手元ã«TypeScriptを使ã£ã¦ã„るプãƒã‚¸ã‚§ã‚¯ãƒˆãŒã‚ã‚Œã°ã€tsconfig.jsonを覗ã„ã¦ã»ã—ã„。高ã„確率ã§ã‚³ãƒ³ãƒ‘イルã®targetã«ES6ã‚‚ã—ãã¯E
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - jellevandenhooff/wcjs: WebAssembly Component Model JS runtime
GitHub - dy/jz: Research: minimal JS subset compiling to WASM
GitHub
GitHub - WebAssembly/js-primitive-builtins: Additional JS primitive builtins
GitHub - tc39/tg5: TC39-TG5: Experiments in programming language standardization. https://ecma-international.org/task-groups/tc39-tg5/
GitHub - trynova/nova: JS engine lolz
Relizy - Seamless and automated release manager | Relizy
{{#tags}}- {{label}}
{{/tags}}