Goodbye innerHTML, Hello setHTML for Stronger XSS Protection

External content

injavascriptweekly

Goodbye innerHTML, Hello setHTML for Stronger XSS Protection

Firefox has introduced support for the Sanitizer API in version 148, marking a significant step forward in web security. This new API allows developers to safely assign HTML to DOM nodes using setHTML, providing built-in protection against common vulnerabilities like cross-site scripting. Unlike the traditional innerHTML method, setHTML ensures that only safe content is rendered by default. The article notes that Chrome 146 (currently in beta) is also adding support for the Sanitizer API, while Safari has yet to implement the feature. Developers are encouraged to check browser compatibility before relying on this cutting-edge tool in production environments. With growing adoption among major browsers, the Sanitizer API is poised to become an essential resource for web developers seeking to enhance security and streamline safe content rendering.
HTML
Web Development
JavaScript
3 min read
React Doctor: Give Your React Code a Quick Check-Up

External content

injavascriptweekly

React Doctor: Give Your React Code a Quick Check-Up

A new tool from the creator of React Scan and React Grab is helping developers assess the quality of their codebases with ease. This utility scans your project and generates a straightforward 0-100 score, offering an at-a-glance evaluation of code health and maintainability. The article highlights how the tool can quickly identify areas for improvement, making it easier for teams to prioritize refactoring and maintain high standards across their projects. With its simple scoring system and actionable feedback, it’s designed to streamline code reviews and support continuous improvement. Available on GitHub, this tool is poised to become a go-to resource for developers seeking to boost code quality and ensure best practices in their React and JavaScript projects.
JavaScript
React
Code Review
Web Development
Open Source
Developer Tools
3 min read
OpenSeadragon 6.0: A Web Viewer for High Resolution Images

External content

injavascriptweekly

OpenSeadragon 6.0: A Web Viewer for High Resolution Images

A long-standing project for rendering ultra-high resolution images has reached a major milestone with the release of version 6. Nearly 15 years in the making, this tool remains one of the most stable and reliable options for users who need to zoom and pan around detailed visuals. Version 6 introduces a new asynchronous, cache-managed pipeline, significantly improving performance and responsiveness. These enhancements make it easier for developers to deliver smooth, interactive experiences, even with massive image files. With its robust feature set and proven track record, this project continues to be a go-to solution for applications requiring high-resolution image rendering and advanced user interaction.
Web Development
Performance
Open Source
JavaScript
3 min read
Oxfmt Beta: A Fast, Rust-Powered JavaScript Code Formatter

External content

injavascriptweekly

Oxfmt Beta: A Fast, Rust-Powered JavaScript Code Formatter

A new JavaScript code formatter, fully compatible with Prettier and developed as a sister project to Oxlint, is making headlines for its impressive speed. The tool claims to be 30 times faster than Prettier and three times faster than Biome, offering developers a significant boost in productivity when formatting large codebases. Since its alpha release, the formatter has expanded its capabilities to support embedded language formatting—including JSX, YAML, HTML, and more—as well as Tailwind CSS sorting. This versatility makes it a powerful option for teams working with diverse technologies and modern frontend stacks. With its rapid performance and broad feature set, this formatter is poised to become a go-to solution for developers seeking efficient, reliable, and customizable code formatting in their JavaScript projects.
JavaScript
Web Development
Performance
Open Source
3 min read
Vue Scrollama 3.0: Vue Component for Scroll-Driven Interactions

External content

injavascriptweekly

Vue Scrollama 3.0: Vue Component for Scroll-Driven Interactions

A new project is making it easier for Vue developers to implement “scrollytelling”—an interactive storytelling technique where scroll position dynamically controls the appearance of elements on the page. Built on top of the popular Scrollama library, this tool streamlines the integration process, allowing for seamless scroll-driven animations and effects within Vue applications. The article highlights how this solution empowers creators to craft engaging, narrative-driven web experiences that respond to user interaction. With clear documentation and practical examples, developers can quickly add scrollytelling features to their projects without complex setup. This advancement opens up new creative possibilities for Vue-based sites, making it simpler to deliver immersive, interactive stories and data visualizations.
VueJS
Web Development
JavaScript
Open Source
Front End
3 min read
bignumber.js 10.0: Library for Arbitrary-Precision Arithmetic

External content

injavascriptweekly

bignumber.js 10.0: Library for Arbitrary-Precision Arithmetic

A new JavaScript library is addressing the limitations of the language’s Number and BigInt types, making it possible to work with extremely large non-integer values. This tool is particularly useful for developers handling scientific calculations, financial data, or any application requiring high-precision arithmetic beyond what native types can offer. The article highlights the library’s interactive demo, which is embedded directly on the page, allowing readers to experiment with its features in the JavaScript console. This hands-on approach makes it easy to understand how the library overcomes common challenges and expands JavaScript’s numeric capabilities. With its practical solutions and user-friendly interface, the library is poised to become a valuable resource for developers needing advanced number handling in their web projects.
JavaScript
Web Development
Open Source
15 min read
⏳ Slowmo: Slow Down, Pause, or Speed Up Time

External content

injavascriptweekly

⏳ Slowmo: Slow Down, Pause, or Speed Up Time

A new tool is making browser debugging and testing more effective by allowing developers to slow down time within the browser environment. Available both as a library and a browser extension, this utility can decelerate CSS animations, transitions, and even requestAnimationFrame calls, providing a clearer view of how web elements behave over time. The article highlights how this tool is especially useful for identifying subtle bugs, fine-tuning user experience, and ensuring smooth animations and transitions. By controlling the pace of visual changes, developers can more easily spot issues that might otherwise go unnoticed at normal speed. With its flexible integration options and focus on improving front-end quality, this tool is set to become a valuable asset for web developers aiming to deliver polished, bug-free interfaces.
JavaScript
Debugging
Testing
CSS
Web Development
Open Source
3 min read
The Fastest Frontend Tooling for Humans and AI

External content

injavascriptweekly

The Fastest Frontend Tooling for Humans and AI

In a new article, Christoph Nakazawa—best known for his work on Jest—shares his top picks for building a lightning-fast JavaScript tool stack. He outlines the essential tools and configurations that help developers optimize performance, streamline workflows, and reduce build times in modern JavaScript projects. The article is designed to be accessible not only to developers but also to large language models (LLMs), thanks to its Markdown format. Christoph’s recommendations cover everything from bundlers and linters to testing frameworks, offering practical advice for assembling a robust and efficient development environment. Packed with actionable tips and expert insights, this resource is a must-read for anyone looking to speed up their JavaScript tooling and stay ahead in the fast-paced world of web development.
JavaScript
Performance
Web Development
LLM
Developer Tools
Optimization
7 min read
Halving Node.js Memory Usage with Pointer Compression

External content

injavascriptweekly

Halving Node.js Memory Usage with Pointer Compression

A new collaboration between Cloudflare, Igalia, and the Node project has resulted in node-caged, a specialized Node.js 25 Docker image featuring V8 pointer compression. This innovation delivers up to 50% memory savings, making it a game-changer for developers running Node.js applications in resource-constrained environments. The article, authored by Matteo, provides an in-depth look at how pointer compression works and the benefits it brings to modern server-side JavaScript. By reducing memory usage, node-caged enables more efficient scaling and improved performance for cloud-native and containerized workloads. With contributions from leading industry players, node-caged is poised to become a valuable tool for teams seeking to optimize their Node.js deployments and maximize infrastructure efficiency.
NodeJS
Web Development
Open Source
JavaScript
13 min read
npmx: A New npm Registry Package Browser

External content

injavascriptweekly

npmx: A New npm Registry Package Browser

A new tool is enhancing the experience of browsing packages on the official npm registry, offering users a faster and smoother interface. Unlike the standard registry, this platform puts more information front and center, making it easier to evaluate packages at a glance. For example, the axios page showcases detailed stats and metadata, streamlining the process of finding and comparing libraries. The creators emphasize that their tool isn’t meant to replace the npm registry, but rather to provide an elevated browsing experience for developers. With improved performance and a user-friendly layout, it’s designed to help users make informed decisions quickly and efficiently. This innovation is poised to become a valuable resource for the JavaScript community, making package discovery and evaluation more accessible for developers of all skill levels.
JavaScript
Web Development
Open Source
Developer Tools
3 min read
---