An Exploit … in CSS?!
Read an explanation of the recent CVE-2026-2441 vulnerability that was labeled a “CSS exploit” that “allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.”
You probably want CSS-Tricks
Read an explanation of the recent CVE-2026-2441 vulnerability that was labeled a “CSS exploit” that “allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.”
Firefox 148 makes shape() available without a flag, aligning with Chrome and Safari.
Browsers don’t just let you bookmark web pages. You can also bookmark JavaScript, allowing you to do so much more than merely save pages.
Continue reading "A Complete Guide to Bookmarklets" at CSS-Tricks
Bramus very quickly walks us through the new scrolled scroll-state query.
Let’s get nuanced in this article and discuss the capabilities of both SVG and raster imaged so that you can make informed decisions in your own work.
Continue reading "Loading Smarter: SVG vs. Raster Loaders in Modern Web Design" at CSS-Tricks
Danny has several ideas for how we could use :near(), a proposed pseudo-class that detects when the pointer is near an element.
Continue reading "Potentially Coming to a Browser :near() You" at CSS-Tricks
Safari TP 237 becomes the first to trial :heading, a pseudo-class for selecting multiple heading levels at once.
The distinction between “components” and “utilities” seems clear at first glance, but gets a little blurred when working with them in Tailwind.
Continue reading "Distinguishing “Components” and “Utilities” in Tailwind" at CSS-Tricks
Interop 2026 is here — find out which features Chrome, Safari, and Firefox have agreed to make consistent across all […]
Lee accepts a challenge: arranging text in a spiral that animates as a vortex on scroll… all in CSS.
Continue reading "Spiral Scrollytelling in CSS With sibling-index()" at CSS-Tricks
Interop 2026 is officially a thing and there’s plenty of new (and even old) CSS features that we can look forward to being cross-browser compatible and consistent!
Chrome 145 enables % units for letter-spacing and word-spacing as well as overscroll-behavior for all scroll containers, now baseline.