2025

1

2024

4

2023

1

2022

3

2021

3

2020

3

2019

9
tech

React Hooks Source Deep Dive (4): useEffect

Fourth in a React Hooks source-code series, explaining why useEffect replaces lifecycle methods, its dependency array, and how it's implemented in React.

tech

React Hooks Source Deep Dive (3): useState

Third in a React Hooks source-code series, focused on useState: its usage and rules, building a minimal implementation before dissecting the React source.

tech

React Hooks Source Deep Dive (2): Component Logic Reuse and Extension

Second in a React Hooks source-code series, comparing five ways to reuse component logic: Mixins, class inheritance, higher-order components, and render props.

tech

React Hooks Source Deep Dive (1): Class Components, Function Components, and Pure Components

First in a React Hooks source-code series, comparing class, function, and pure components, and tracing how PureComponent controls re-rendering in React.

tech

Development Experience Sharing: 2life Diary

The founder of 2life Diary shares the team's product workflow: initiation, design, development, and maintenance, plus tooling choices and issue-tracking practices.

tech

Frontend Security | HPP Attack Examples and Prevention

An explanation of HTTP Parameter Pollution (HPP) attacks, illustrated with a real HackerOne social-share-button vulnerability, covering common attack techniques and corresponding defenses.

tech

Frontend Security | XST Attack Principles and Prevention

Explains how Cross-Site Tracing (XST) abuses TRACE/TRACK requests to expose httpOnly cookies and other sensitive headers, plus defenses like disabling TRACE and browser restrictions.

tech

Frontend Security | CSRF Attack Techniques and Defenses

A guide to CSRF: how GET, POST, and link-based attacks work, and how same-origin checks, SameSite cookies, and synchronizer tokens compare as defenses.

tech

Frontend Security | XSS Attack Techniques and Prevention

A technical rundown of reflected, stored, DOM-based, and JSONP XSS attacks with examples, plus defenses covering input/output escaping, CSP headers, and HttpOnly cookies.

2018

1

2017

2

2016

1
Follow what matters

订阅 Airing

选择接收方式,再决定你真正想看的内容。

新一期编好后发送;周刊邮件中可切换语言或退订。