Skip to content

2022-04-13のJS: TypeScript 4.7 Beta、RedwoodJS 1.0、Sanitizer API #975

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 19 commits into from
Apr 13, 2022
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update 587 draft
  • Loading branch information
azu committed Apr 11, 2022
commit d0a3bd1104d48d7aabcf51de30baaca0ce2e371c
19 changes: 17 additions & 2 deletions _i18n/ja/_posts/2022/2022-04-11-587draft.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: "2022-04-11のJS: "
author: "azu"
layout: post
date : 2022-04-11T09:23:11.582Z
date : 2022-04-11T10:09:17.674Z
category: JSer
tags:
- Tools
Expand Down Expand Up @@ -89,7 +89,7 @@ Permissions APIをデフォルトで有効化、`inert`属性をデフォルト
[turborepo.org/blog/turbo-1-2-0](https://turborepo.org/blog/turbo-1-2-0 "Turborepo 1.2 | Turborepo")
<p class="jser-tags jser-tag-icon"><span class="jser-tag">monorepo</span> <span class="jser-tag">Tools</span> <span class="jser-tag">ReleaseNote</span></p>

Turborepot 1.2リリイース
Turborepot 1.2リリース
対象をフィルターできる`--filter`フラグの追加、`--dry-run`フラグの追加。
パフォーマンスの改善、キャッシュの整合性をHMACで検証できる`signature`オプションの追加など

Expand All @@ -106,6 +106,21 @@ Turborepot 1.2リリイース。
TypeScript CompilerがどうやってTypeScritのコードをコンパイル、エラーを報告しているかについての解説記事


----
<h1 class="site-genre">スライド、動画関係</h1>

----

## Making of: The Sanitizer API (Nullcon 2022) - Google スライド
[docs.google.com/presentation/d/1eLmIZkY7auD8xT-Q6AzBKM\_ASFHH8Z5fMyfeoSbSH-k/view#slide&#x3D;id.g82761e80df\_0\_1948](https://docs.google.com/presentation/d/1eLmIZkY7auD8xT-Q6AzBKM_ASFHH8Z5fMyfeoSbSH-k/view#slide=id.g82761e80df_0_1948 "Making of: The Sanitizer API (Nullcon 2022) - Google スライド")
<p class="jser-tags jser-tag-icon"><span class="jser-tag">DOM</span> <span class="jser-tag">API</span> <span class="jser-tag">security</span> <span class="jser-tag">slide</span></p>

Sanitizer APIについてのスライド。
DOM XSSを防ぐSanitizer APIがサニタイズしたHTML文字列を返すAPIではない理由、`setHTML` APIについて

- [Sanitizer API creating mock context-element can cause XSS when used in different context · Issue #42 · WICG/sanitizer-api](https://github.com/WICG/sanitizer-api/issues/42 "Sanitizer API creating mock context-element can cause XSS when used in different context · Issue #42 · WICG/sanitizer-api")
- [1669945 - Sanitizer bypass if the sanitized markup is assigned to srcdoc](https://bugzilla.mozilla.org/show_bug.cgi?id=1669945 "1669945 - Sanitizer bypass if the sanitized markup is assigned to srcdoc")

----
<h1 class="site-genre">ソフトウェア、ツール、ライブラリ関係</h1>

Expand Down