Web
HTTP caching, properly: Cache-Control, ETags and what browsers actually do
The fastest request is the one that never reaches your server. A practical guide to the headers that control browser and CDN caching.
Tag
#web
Every story tagged #web.
Security
CSRF in the age of SameSite cookies
Browsers now block many cross-site requests by default. That helps, but it doesn't make CSRF tokens obsolete.
Web
Modern CSS layout: grid, container queries and :has()
CSS has quietly absorbed features that used to need frameworks or JavaScript. A tour of the layout tools worth knowing now.