Articles on web development, modern web technologies, performance optimization, and software engineering practices.
Next.js shipped 16.3.3 and 15.5.24 on August 25 to fix two critical unauthenticated remote code execution bugs — one in AVIF image optimization, one on Windows-hosted servers. The patch is the easy part; the lesson about /_next/image is the durable one.
Chrome turns on "Always Use Secure Connections" by default in October 2026. Your site is almost certainly on HTTPS — but a single plaintext hop in a redirect chain still triggers the interstitial. Here is how to find yours.
With Safari 26.3 filling the last gap, zstd content-encoding now reaches roughly 84% of global traffic. Here is where it wins over Brotli, where it doesn't, and how to deploy it without breaking your cache.
Chrome has shipped animation-trigger and timeline-trigger, letting you fire fixed-duration CSS animations at a scroll threshold with no JavaScript. Here's how the model works and where it fits in production.
Chrome 151 adds a shadowrootslotassignment attribute to <template>, so server-rendered web components can use manual slotting without a line of JavaScript. Here's what closed, why it matters for SSR, and how to use it.
CSS now has a native if() function that resolves a value against a media query, a feature query, or a style query — right inside the property. Here's how the syntax works, the patterns it replaces, and how to ship it while Firefox and Safari catch up.
Tell us what you're trying to build. A discovery call, a one-page summary within 48 hours, a proposal within a week.