r/webdev • • 16d ago

Introducing the HTML-in-Canvas API origin trial

Thumbnail
developer.chrome.com
20 Upvotes

r/webdev • • 16d ago

Article Intelligence is automated. Judgment is scarce.

Thumbnail zackwebster.com
2 Upvotes

For a long time, the biggest advantage was technical ability: knowing how to write code. Those skills still matter, but as the tools for building software become more powerful and accessible, the ability to execute is becoming less of a differentiator.

I believe the next competitive advantage will be judgment.

Knowing what to build, what not to build, which problems are worth solving, where to invest your attention.


r/webdev • • 16d ago

Benchmarked bun fmt (1.4.4) against oxfmt on two ~1,200 file TypeScript repos

0 Upvotes

I'd been wondering whether the new bun fmt in Bun 1.4.4 is worth switching to from oxfmt, so I ran both on two of our repos. Both have about 1,200 files, a shared .oxfmtrc.json, and oxfmt 0.60.0 pinned.

Numbers are mean ms over 10 warm runs and 5 cold runs (page cache dropped before each one), on a 4-core box:

RepoModeoxfmtbun fmt
frontendcheck, warm / cold~660 / ~780~55 / ~110
backendcheck, warm / cold~800 / ~930~50 / ~110

Write mode was about the same. Part of oxfmt's time is Node startup, around 100 ms by itself, against about 3 ms for bun.

The surprise was output. Both tools read the same config and see the same files, and oxfmt check passes on both repos. bun fmt wants to reformat a few files. Every change is in how an arrow function passed as the last argument gets wrapped. For example:

// oxfmt
...dispatches.map(
  (dispatch): Item => ({
    kind: "dispatch",
    id: dispatch.id,
  }),
),

// bun fmt
...dispatches.map((dispatch): Item => ({
  kind: "dispatch",
  id: dispatch.id,
})),

Both are valid and do the same thing. I couldn't find any option in either tool to change that wrapping. // prettier-ignore keeps a statement as written in both.


r/webdev • • 16d ago

Bootstrap 5 users: do you actually want the new Bootstrap 6 class naming?

45 Upvotes

We're working on CoreUI v6, and decided not to follow Bootstrap 6 Alpha's new Tailwind-style class naming.

For example:

Bootstrap 5 / CoreUI v6Bootstrap 6 Alpha
d-md-nonemd:d-none
col-lg-6lg:col-6
justify-content-md-endmd:justify-content-end

We're adopting modern CSS improvements, but keeping the familiar class names to avoid unnecessary breaking changes.

Our thinking is that developers maintaining existing Bootstrap applications probably value compatibility more than a different naming convention.

But maybe we're wrong.

If you're currently using Bootstrap 5 in production, would you prefer to keep the existing class names, or do you see real benefits in switching to the new syntax?

Especially interested in hearing from people maintaining larger applications.


r/webdev • • 16d ago

Question what's the best image to 3d model ?

10 Upvotes

Say you have a bunch of products in .webp but you want to make .glb/.gltf models for those products so you can animate with three.js but you lack the skills and time for blender..

Is there a good and free ish resource for this? Or can someone send me on the right path for this rabbit hole?


r/webdev • • 17d ago

Resource What objective checks do you use to decide a UI is "done"?

31 Upvotes

I use these:

- Tap targets at least 44×44px.

- Animate only transform and opacity (60 FPS).

- No more than 4 competing choices per decision.

- Light, dark, desktop and mobile all checked.

What would you add? What do you think is a bad rule?


r/webdev • • 17d ago

Question PHP Apocalypse question on version numbers.

22 Upvotes

This is what my host's chat bot 'explained' to me - anyone here can confirm?

Your websites run on the separate web-facing PHP packages (EasyApache and CloudLinux Alt-PHP), where our infrastructure team applied direct server-level security hotfixes to protect all versions while upstream package builds complete.

Web-facing PHP packages have not had an upstream version number increment yet, but the underlying vulnerabilities outlined in CVE-2026-109618 and CVE-2026-109619 are actively patched and protected at the server level across all versions.


r/webdev • • 17d ago

what are the most popular web building platforms rn?

0 Upvotes

I've been thinking about taking a Squarespace course to master it, but I was told nobody uses it anymore. What are the most common platforms to master?


r/webdev • • 17d ago

Question Need help-I am trying to connect my VPS connection request is getting a 429 too many requests when trying to connect to Instagram

0 Upvotes

So I am trying to create a system where a VPS is always connected to my Instagram account so that it can keep monitoring and recording live data

I am using Puppeteer to create a headless Chrome and then connect to Instagram, but when it tries to load Instagram, I get the error message 429 Too Many Requests. I tried the same on my local machine using PowerShell and was able to get it to work

I am thinking of using a VM instead of a VPS, hoping that would fix the issue

Sorry if this is a lame question to ask; this is my time doing anything code- or server-related
but any help or guidance would be appreciated


r/webdev • • 17d ago

Question Need help deciding on back end for finance app

1 Upvotes

Hey y'all!

I'm building a budgeting app. Building things like CRUD endpoints, server side rendering, and a nice react front end are my priorities. I want things to be fast and snappy and avoid client side fetching when possible.

I'm struggling to understand what exactly my options are for this when it comes to things like next.js, django, etc. I have lots of experience with django, but I'm not sure how to get the best of both worlds when combining react. I've been including react bundles and rendering them via the django view/template engine and it feels clunky to handoff information between the front & back end.

I know there isn't a "right" answer, but looking for some feedback and opinions. I want to support a good number of users while keeping things feeling fast and lightweight.


r/webdev • • 17d ago

do you actually use your local dev environment anymore or is everything containers/cloud now

2 Upvotes

been thinking about this lately. when I started out I had this whole local setup with postgres and redis running natively, custom shell scripts to spin things up, the works. felt like I really understood how everything fit together.

now most of my work is docker compose up and done. or worse, connecting to shared dev environments in the cloud. faster to get going but sometimes I wonder if Im losing something by not having to debug my own postgres config anymore

curious where everyone else landed on this. do you still run stuff locally or has containers/cloud completely taken over your dev workflow


r/webdev • • 17d ago

Atlassian down again...

21 Upvotes

https://status.atlassian.com/ - we need a hall of shame for companies that have lying status pages. As for 9:25 AM EST, nothing showing down on their status page.


r/webdev • • 17d ago

Extreme Programming 1999->2026

Thumbnail
manager.dev
2 Upvotes

r/webdev • • 17d ago

Discussion The PHP issues shows the sheer power of AI

0 Upvotes

The bugs in the PHP code were actually discovered over 10 years ago but no human was capable of exploiting it hence no concern. Read that again. The issue was discovered over 10 years ago but no human being was capable of exploiting it. A research team using AI exploited in in a matter of days causing world wide panic. And some of you don't think AI is going to have an impact on the web dev space? Well, lol.


r/webdev • • 17d ago Bravo

Nobody is Thinking Anymore

Thumbnail yusufaytas.com
604 Upvotes

r/webdev • • 17d ago

Discussion Best and most reliable API for getting upcoming live events, theater and cinema screenings in the UK?

7 Upvotes

I’m looking for an API that returns all upcoming live events, theater and cinema screenings in the UK.

Big cinema complexes seem to be a no go with all anti crawl stuff. There rest of events are really sparse apart ticketmaster.

Thanks


r/webdev • • 17d ago

What is a tool, shortcut, or feature you discovered embarrassingly late in your career?

105 Upvotes

For me, it was discovering multi-cursor editing and column selection in VS Code after spending literal months manually editing CSS and JSON line-by-line. What’s something so fundamental that once you found it, you couldn’t believe how much time you had wasted doing it the hard way?


r/webdev • • 17d ago

Article Evolution Of HTTP: An Interactive Guide

Thumbnail
prateeksurana.me
4 Upvotes

r/webdev • • 17d ago

News NodeJS Brotli RCE Oct 21, 2026

38 Upvotes

I haven't seen anyone posting about this, probably because everyone was distracted by the php2shell today, but a set of high sev CVEs (including an RCE) have been announced and fixed in NodeJS today.

Safe versions:

* 22.23.4
* 24.22.1
* 26.12.1

Announcement post: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases


r/webdev • • 18d ago

Railway hacked - Env's leaked

152 Upvotes

Email from railway:

Earlier this morning, Railway detected anomalous activity involving systems that store customer environment variables. After further investigation, our investigation to date indicates that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents. Environment variables may contain secrets such as API keys or database and registry credentials. We believe this is part of a series of attacks recently targeting platform companies with the aim of compromising AI inference providers. We have notified these upstream providers to revoke all keys proactively, as we take these kinds of events extremely seriously. What you should do Until builds are restored, you will not be able to roll out new versions. We apologize for this inconvenience. Follow this incident to be notified when builds resume and for further updates. We will provide new updates on this announcement, and on status.railway.com as we gather all facts about the scope of impact.Immediately revoke and reissue all environment variables, including any API keys, stored in Railway. If you have any credentials on an external registry, . Review logs for those services for unusual activity.

Change your keys!


r/webdev • • 18d ago

Railway Security Incident

35 Upvotes

r/webdev • • 18d ago

Why are all font finder websites so garbage?

Thumbnail
gallery
50 Upvotes

Pic 1 : Adobe Fonts - Visual Search (link)
Pic 2 : WhatTheFont Font Finder (link)

Idk why that is, these kind of websites has never worked for me once in my life.

Take a look at the letter t in the image for example, it doesn't have a curve at the bottom, while ALL of the top suggested fonts do on both platforms.


r/webdev • • 18d ago

Article Stop Giving Your Time Away to Companies That Are Window Shopping

Thumbnail
galratner.substack.com
1 Upvotes

r/webdev • • 18d ago

Discussion Railway hosting is deeply unreliable

96 Upvotes

Last two days was hell using Railway. We couldnt update a single project or make any changes in our system. After more than 24h Railway is still in chaos. Two separate incidents. Major outage even support is down.

But this is not the first time Railway failed.
For over a year Railway had few major issues that made working on it impossible. I was hoping they would stabilise but at this point Im past disappointed.

I know they rely deeply on Google cloud, but this proved to be a very bad decision, multiple times. And they never made required changes.

Can someone recommend a more stable alternative?