Blog
Web Development
Frameworks, releases and the craft of the web.
Web Development posts, page 1 of 2
- 4 min read
Node.js Moves to One Release a Year, With LTS for Every Major
From Node.js 27, one major ships each April, every version gets 30 months of LTS, and a new Alpha channel starts in October 2026.
- 4 min read
WordPress Patches a Bug That Turns a Comment Into a Takeover
A WordPress core flaw let anyone's blog comment quietly become full server control once an admin viewed it, so update to the September 17 fix now.
- 4 min read
Next.js Ships an Emergency RCE Fix, Then Nine More Bugs Loom
A critical flaw in Next.js image generation allowed remote code execution, and a second patch covering nine more bugs is due September 30.
- 4 min read
Chrome 153 Rewrites Its XML Parser in Rust and Adds 3D Web Audio
Chrome 153 swaps its C++ XML engine for Rust, adds single-axis CSS scroll containers, and brings the open IAMF 3D audio format to the web.
- 4 min read
Chrome and Firefox Both Just Switched to Two-Week Release Cycles
Chrome and Firefox have each cut their release cadence from four weeks to two, so version numbers will now climb roughly twice as fast.
- 4 min read
Cloudflare Now Blocks AI Crawlers by Default on Ad-Supported Pages
As of September 15, Cloudflare's default settings block AI training and agent crawlers on any page carrying ads, while search bots stay allowed.
- 4 min read
Safari 27 Ships With Customizable Dropdowns and Async WebAssembly
Safari 27 lets developers restyle native dropdown menus and gives WebAssembly code a way to call asynchronous JavaScript.
- 4 min read
Ladybird's From-Scratch Browser Engine Just Closed a Big Speed Gap
Ladybird's independent browser engine posted a twelve-fold CSS benchmark jump in August and got Twitch streaming working ahead of its 2026 alpha.
- 4 min read
New Camera and Microphone HTML Elements Reach a Second Browser
Microsoft Edge 153 adds native camera and microphone HTML elements, following Chrome, but Firefox and Safari have not committed to them yet.
- 4 min read
Chrome Patches Its Sixth Actively Exploited Zero-Day of 2026
Google fixed a V8 engine flaw already under attack in Chrome 152.0.7977.82, the sixth Chrome zero-day patched so far in 2026.
- 4 min read
Firefox 155 Adds Sortable Tab Groups and Fixes 30 Security Flaws
Firefox 155 brings sortable tab groups, faster connections via Happy Eyeballs v3, Nintendo Switch Pro controller support, and patches over 30 security bugs.
- 4 min read
Bun 1.4.1 Adds HTTP/2 and Shrinks Compiled App Sizes by 45 Percent
Bun 1.4.1 adds HTTP/2 to Bun.serve, streams large writes to disk, and cuts compiled binary sizes by up to 45 percent.
- 4 min read
Chrome 153 Replaces Its XML Parser With a Memory-Safe Rust Rewrite
Chrome 153 swaps the C-based libxml2 for a Rust XML parser after a run of memory-safety CVEs, and adds new camera and microphone HTML elements.
- 4 min read
Chrome Web Store Permanently Purges the Last Manifest V2 Extensions
Google deleted every remaining Manifest V2 extension from the Chrome Web Store on August 31, 2026, ending a four-year phaseout.
- 4 min read
AliExpress Used a Silent Audio Trick to Fingerprint Visitors' Browsers
A developer's headphones cutting out led to the discovery that AliExpress was using inaudible audio signals to track browsers.
- 4 min read
htmx 4.0 Rewrites Its Networking Core Around fetch()
htmx 4.0 replaces XMLHttpRequest with fetch() to enable response streaming, breaking some 2.x behavior along the way.
- 4 min read
Firefox Moves to Two-Week Releases, Matching Chrome and Edge
Firefox switches from monthly to two-week releases starting September 1, matching Chrome and Edge's faster release cadence.
- 4 min read
PHP 8.6 Beta 2 Fixes a Cluster of Use-After-Free Bugs Ahead of Schedule
PHP 8.6 Beta 2 shipped two days early with SNMP encryption upgrades and fixes for several use-after-free bugs in the DOM extension.
- 4 min read
Next.js Patches Two Critical RCE Bugs, One With a Public Exploit
Next.js rushed out fixes for two critical remote code execution flaws, and working exploit code for one is already public on GitHub.
- 4 min read
Rust 1.98.0 Lets the Compiler Reorder Your Floating-Point Math
Rust's new stable release adds opt-in algebraic float methods for faster math and a built-in replacement for the itoa crate.
- 4 min read
Researchers Show a Much Faster Spectre Attack on Cloudflare Workers
A study leaked a planted JWT from a co-located Cloudflare Worker at 12 bits per second with 99.16% accuracy, prompting new isolation defenses.
- 4 min read
CSS May Soon Style Pages Based on Where a Visitor Navigated From
A new CSS proposal called Navigation Matching would let stylesheets react to page transitions and links without any JavaScript.
- 5 min read
Bun 1.4 Ships a Rust Rewrite Built by 64 AI Agents in 11 Days
Bun's owner Anthropic cut memory use from 6.7 GB to 609 MB by having AI agents port 1,448 files from Zig to Rust, but critics call the code quality a mess.
- 4 min read
Chrome 152 Adds a CPU Speed API, Then Chrome Speeds Up Its Own Releases
Chrome 152 ships a new navigator.cpuPerformance API on August 25 and is the last Chrome version on the old four-week release cycle.