Next.js Security Update: December 11, 2025
Another week, another Next.js security problem.
Well, okay, two new security problems...
The f*** off contact page - Nic Chan
A nice little rant about how many company websites have a contact page (or a lack of contact page) that is designed to discourage you from contacting them. Nothing says "we want your money now fuck off" like a "here's our knowledge base" link...
Unflipgame
Neat little game that reminds me of an even more clever take on what 5x5 seeks to do.
Cloudflare outage on November 18, 2025
Cloudflare's explanation of what was behind the great outage of 2025.
Cloudflare Pages
I use GitHub pages a lot. They work. But I also feel that all-eggs-in-one-basket isn't a great idea. I should look at playhing with Cloudflare Pages at some point.
Beat Maker
There's a lot of these online, this is another cool one. What makes it interesting, to some degree, is that it's written in Clojure.
Proton Services Status
GNU Artanis - A fast web application framework for Scheme
Just what it says in the title: a web framework in Scheme.
Content Security Policy - OWASP Cheat Sheet Series
Useful information on content security policy.
The Line of Death
The most important part of the web browser UI is...
quismi
Tool for making background wallpapers.
What Does "use client" Do? — overreacted
Interesting description of what "use client" and "use server" do in React.
Better performance by optimizing Gunicorn config - Building the system - Medium
Advice on how best to configure Gunicorn for Django applications.
Maxima
Maxima, on the web, in the browser.
HOW TO BUILD TWITTER CLONE PROJECT WITH REACT JS FOR BEGINNERS
I can't actually decide if this is humour or not, but it's hilarious, for sure.
WordPress is in trouble
I've not really kept up with the WordPress drama, but I'm aware that it's ongoing and bizarre. This blog post seems to do a reasonable job of helping catch up on what's what.
The Open Source Foundation for Application Security
All things software security.
Silent Poems
Not easy to describe, but lots of fun to play around with. Create art, of a sort, by typing.
RemovePaywall | Free online paywall remover
Paywall removal tool. These seem to be a bit of a moving target (or rather the success with which they work is), so it's good to have a collection of them.
slash pages
Fun little guide to all sorts of "common" pages you could add to a website. I imagine most people would never discover them, but I like it as an idea.
s l o w r o a d s
Endless driving in the browser; perfect for /those/ meetings. You know the ones.
gaining access to anyones browser without them even visiting a website - eva's site
So I’m glad I never got comfortable with Arc, having briefly tried it and not really liked it.
giscus
A widget for blogs and similar that uses GitHub discussions as a comments section. Might be a good idea for my own blog.
How to win at CORS
A comprehensive introduction to CORS.
HTML head tags
Good list of tags that can go in the header section of a web page.
CSS selectors cheatsheet
Good cheatsheet of CSS selectors.
How do developers get such amazing background images?
Reddit thread about stock images that contains a reasonable list of sites where royalty-free images can be found.
Copy to clipboard pure JavaScript - JSFiddle
Example code for copying rich text to the clipboard from JavaScript.
BADA55.io - CSS hex color words for web developers
Amusing, and not always sfw, resource for colours with "interesting" names.
Beyond appendChild: Better convenience methods for HTML - DEV Community
Short article about some handy DOM manipulation methods and idioms in JavaScript.