Third party CSS is not safe
…because third-party anything really isn’t safe. Jake Archibald:
If you’re worried about users tricking your site into loading third party resources, you can use CSP as a safety net, to limit where images, scripts and styles can be fetched from.
We’ve long discussed security considerations for using and managing third-party scripts, but the topic of security in third-party CSS was recently broached in response to a “trick” that employs keylogging via CSS.
Jake’s post is a worthy read because …
Third party CSS is not safe is a post from CSS-Tricks
WordPress Comment Spam
Akismet is an incredible spam preventer for WordPress sites. I’d say it does 95% of the work for us. A few issues though make me want to augment it with other tools:
- Some spam still slips through
- It doesn’t prevent spam that seems easy to block
- There are false-positives, so spam still needs to be checked
#1 is no big deal, we can nuke the slips pretty easily. We even have WordPress comment settings such that all comments need to …
WordPress Comment Spam is a post from CSS-Tricks
Learn UI Design: The Complete Video Course
(This is a sponsored post.)
If you’ve ever thought “Man, all my designs look like crap”, this may be the best ad you see all day. If you’ve desperately searched Dribbble or Behance for inspiration, yet found yourself completely unable to make something look nice, this one’s for you. And if you’ve ever had a sinking feeling that most design articles are worthless, and no matter how much you read about color theory, it’s not going to …
Learn UI Design: The Complete Video Course is a post from CSS-Tricks
35+ Best Lightroom Presets of 2018
WPWeekly Episode 306 – AMP, GDPR, and Brewing Beer At The Boss’ House
Torque Toons: Who Are You Wearing?
The post Torque Toons: Who Are You Wearing? appeared first on Torque.
Responsive Components: a Solution to the Container Queries Problem
Container Queries, as in, the ability to style elements based on values from a particular element, like its width and height. We have media queries, but those are based on the viewport not individual elements. There are plenty of use cases for them. It’s been said before, but I’ll say it again, if container queries existed, the vast majority of media queries in CSS would actually be container queries.
Discussion about how to pull it off technologically gets …
Responsive Components: a Solution to the Container Queries Problem is a post from CSS-Tricks
How The REST API And Gutenberg Work Together
The post How The REST API And Gutenberg Work Together appeared first on Torque.
Using Sass to Control Scope With BEM Naming
Controlling scope is something you probably don’t tend to consider when working with CSS and Sass. We have had access to the ampersand (&) for quite some time now, which gives us a level of scope—but it’s easy for it to lose its usefulness when you’re nested quite deeply. The & can send us down a windy road of doom when we completely lose track of what it means and can be responsible for some really heavy bloat.…
Using Sass to Control Scope With BEM Naming is a post from CSS-Tricks




