...brittle. This lesson teaches you to structure JavaScript as reusable components that attach to HTML elements, support multiple instances, and clean up after themselves. Important Work on this lesson in...
Learning goals You can explain what makes JavaScript "unobtrusive": behavior is attached to HTML elements by selector, and views contain no scripts. You can explain the properties of a...
HTML sanitizer by the wonko.com guy...
SlickMap CSS is a simple stylesheet for displaying finished sitemaps directly from HTML unordered list navigation...
...die meisten modernen Webapplikationen bestehen. Außerdem weißt du für was welcher Baustein da ist: HTML CSS Javascript (Browser, Frontend) "Backend" Applikation Du verstehst warum HTTP ein "stateless Protocol" ist.
4xx 5xx Was ist ein HTTP Body? Wo ist der Unterschied zu einem HTML Body? Nenne die Hauptunterschiede, die zwischen HTTP/1.1 und HTTP/2 bestehen. Gehe insbesondere auf Multiplexing ein...
...every interaction reachable and usable with the keyboard alone. You can explain when semantic HTML is not enough and ARIA attributes are needed, and use them correctly. You can explain...
...why built-in HTML elements are preferable to custom JavaScript components: they bring keyboard activation, focus handling and semantics for free, so extend them instead of rebuilding them.
If you have several submit elements (inputs or buttons with type="submit") that each cause different things to happen (e.g...
...them in views and forms. You can explain how form input travels from the HTML form through the request into params and onto a record. You can recognize the parts...
In this exercise we take a closer look at how the HTML forms produced by Rails helpers, and how user input in those forms is sent over...
...type or timecop. 📄 Some libraries have a dedicated documentation site, e.g. Unpoly. Web platform (HTML, CSS, JavaScript) 📄 MDN Web Docs — the reference for HTML elements, CSS properties and JavaScript features...
...claims with a small experiment — an irb session or a throwaway script; for the HTML one, a throwaway .html file in your browser: Ruby: Array#tally HTML: the and elements...
...interactive behavior to our interfaces that would not be possible through declarative rules in HTML and CSS alone. Important Work on this lesson in teacher mode. Learning goals
...explain what the DOM is and how it relates to the HTML the server sent. You can select elements by CSS selector, on the whole document or within a parent...
When you load a with a nonce, that script can await import() additional sources from any hostname. The nonce is propagated automatically for the one purpose of importing more scripts. This is not related to strict-dynamic, which propagates nonces for any propose not limited to imports (e.g. inserting elements). Example We have a restrictive CSP that only allows nonces: Content-Security-Policy: default-src 'none'; script-src 'nonce-secret123' Our HTML loads script.js using that nonce: Our script.js imports other.js without a nonce: let other = await import('other.js') console.log("Look, script.js has imported %o", other) The import succeeds without a nonce, due to implicit nonce propagation. Why this is useful In modern build pipelines, code splitting (chunking) is implemented using dynamic imports. Nonce propagation allows us to use automatic chunking with restrictive, nonce-based CSPs without using strict-dynamic. E.g. esbuild automatically groups dynamically imported modules into chunks, and writes that chunk to disk. The compiled build has an await import('assets/chunk-NAXSMFJV.js'). There's no way to inject a nonce into that import(), but implicit nonce propagation still allows the request. Should I worry about this? It would require some truly strange code for user input to make it into an import() argument. I wouldn't lose sleep over this. Is this a browser bug? It is by design. Here are some sources: HTML Spec Section 8 (Web Application APIs) (search for "descendant script fetch options") Chromium test ensuring none propagation Firefox bug implementing nonce propagation CSP issue: Someone concerned about propagation being a vulnerability CSP issue: Proposal for import-src that went nowhere Are other CSP sources also propagated? No, only nonces. In particular host-based CSPs do not propagate trust. For example, you only allow scripts from our own host (no nonces): Content-Security-Policy: default-src 'none'; script-src 'self' Our HTML loads script.js from our own host: Our script.js imports other.js from a different host: let other = await import('https://other-host.com/other.js') This fails with a CSP violation: Executing inline script violates the following Content Security Policy directive 'script-src 'self''
This thing leaves any other tag-completion method I have ever seen for HTML in the dust. It's light-years beyond anything else I've witnessed -- and autocompletion is...
...substitute for checking the actual rendering in real clients. Make sure you follow Designing HTML Emails...
...related matchers like toBeVisible() or toHaveCss(css) It gives you a function to load HTML from fixture files. Without this you would have to manually add elements to and clean...
Write your app using HTML, CSS or JavaScript, upload it to the PhoneGap Build service and get back app-store ready apps for Apple iOS, Google Android, Windows Phone...
...that converts the artwork and animation contained in Adobe® Flash® Professional (FLA) files into HTML. This allows you to reuse and extend the reach of your content to devices that...
You know that layouting HTML e-mails is terrible. For more fun, check Litmus' list of top 10 e-mail developments of 2015 that did not make things better...
...and generate a base64-encoded version of it. You can copy the result as HTML tag with data URI, CSS rule with background-image and data URI, plain Base64-encoded...
Using this gem, whenever a Capybara test in Cucumber, Rspec or Minitest fails, the HTML for the failed page and a screenshot (when using capybara-webkit, Selenium or poltergeist) is...
CSS3 comes with new unit rem. It works like em but it is always relative to the element instead of...
Examples how to create dozens of shapes using pure CSS and a single HTML element...
As the title says: this jQuery plugin creates bar charts from HTML tables. It comes in some different flavors. Check the examples page: http://alphagov.github.com/magna-charta/.
pjax loads HTML from your server into the current page without a full reload. It's ajax with real permalinks, page titles, and a working back button that fully degrades...
...in regular textareas to make them suitable for in-browser coding of languages like HTML, CSS, Javascript, or your favorite server-side language. The idea is to be able to...
...nodes based on rendered text, even if it spans over multiple elements in the HTML. Imagine a page that includes this HTML: Hi! Try to match me. Even though the...
...text is separated by a tag in the HTML, it is matched until Capybara 2 which used to "squish" text prior to the comparison. # Capyabara 1 or 2 page.find('.haystack...