Matt Wing's Avatar

Matt Wing

@wingmatt.dev

Depending on the day, I'm a professional tinkerer, active listener, and/or project manager. I've built web apps, virtualized domain controllers, and counseled memory care patients. Current code interests: PHP, Laravel, & Vue

229
Followers
1,229
Following
10
Posts
07.11.2024
Joined
Posts Following

Latest posts by Matt Wing @wingmatt.dev

Video thumbnail

You can throw away innerHTML and replace it with the new setHTML(), which has a built-in sanitizer. Here's how it works:

25.02.2026 12:09 πŸ‘ 155 πŸ” 25 πŸ’¬ 6 πŸ“Œ 7
Preview
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 – Mozilla Hacks - the Web developer blog Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted…

The Sanitizer API landed in Firefox 148, along with element.setHTML().

This lets you fully configure how HTML strings are cleaned as they're parsed.

hacks.mozilla.org/2026/02/good...

24.02.2026 14:18 πŸ‘ 203 πŸ” 58 πŸ’¬ 1 πŸ“Œ 14
Preview
Standard HTML Video & Audio Lazy-loading is Coming! | Scott Jehl, Web Designer/Developer A quick update on my team's work to bring video and audio lazy loading to browsers today

πŸ¦₯ A fun update over on the blog: πŸ¦₯
Standard HTML Video & Audio Lazy-loading is Coming!
scottjehl.com/posts/lazy-m...

22.02.2026 18:43 πŸ‘ 47 πŸ” 10 πŸ’¬ 1 πŸ“Œ 0
Technical debt as a lack of understanding Some time back, I was working on a project where it felt like the timebomb of technical debt was exploding in our faces. We couldn’t refactor the whoositz because of the whatsitz and when we asked abo...

That's not just me saying it's technical debt, it's also the guy who invented the term technical debt saying it.

daverupert.com/2020/11/tech...

22.02.2026 21:33 πŸ‘ 8 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Preview
How Generative and Agentic AI Shift Concern from Technical Debt to Cognitive Debt The term technical debt is often used to refer to the accumulation of design or implementation choices that later make the software harder and more costly to understand, modify, or extend over time...

Glad to stumble upon this post by Margaret-Anne Storey. It echos some of my recent experiences with Generative AI. It's very quick to spin up something that is quite large and complex and you don't know how it works. And a lack of understanding is technical debt.

margaretstorey.com/blog/2026/02...

22.02.2026 21:32 πŸ‘ 19 πŸ” 8 πŸ’¬ 3 πŸ“Œ 2

~7 years ago I started curating a list of Design Tokens resources on GitHub… today I launch something better.

An updated, tagged collection of 292+ articles on design tokens.

www.alwaystwisted.com/projects/dtm...

more links/resources coming soon.

πŸ™πŸ–€

#DesignTokens #DesignSystems #WebDev

11.02.2026 14:50 πŸ‘ 66 πŸ” 12 πŸ’¬ 2 πŸ“Œ 4
Preview
The open source design stack Scott Riley tested free and open source design tools out when researching his course, Mindful Design. They actually worked out better than Figma ever could, as he explains in this article with loads of...

Scott Riley tested free and open source design tools out when researching his course, Mindful Design. They actually worked out better than Figma ever could, as he explains in this article with loads of options for you.

piccalil.li/blog/the-ope...

05.02.2026 12:07 πŸ‘ 61 πŸ” 20 πŸ’¬ 3 πŸ“Œ 7

Trust is interesting because it’s not quantifiable but it certainly is palpable. Teams with trust move lightning speeds faster than those without.

29.01.2026 14:13 πŸ‘ 93 πŸ” 17 πŸ’¬ 6 πŸ“Œ 2
Video thumbnail

The new corner-shape CSS property unlocks exciting new UI patterns.

corner-shape: bevel round;
border-radius: 1em 0 / 3em 0;

28.01.2026 04:24 πŸ‘ 145 πŸ” 14 πŸ’¬ 5 πŸ“Œ 1
Preview
Accessibility For Everyone by Laura Kalbag Read the book online for free.

My book, Accessibility For Everyone, is now free and online as a website.

accessibilityforeveryone.site

The book was first published by A Book Apart in 2017 but it holds up! It covers web accessibility for designers, developers, content folks, and really everyone who works in tech.

27.01.2026 13:14 πŸ‘ 308 πŸ” 194 πŸ’¬ 9 πŸ“Œ 10

The new Web Almanac is out. πŸŽ‰

If you don't know the Web Almanac, it's pretty much a summary and analysis of the state of the web based on real data from the HTTP Archive.

As a yearly tradition, I'll go over it and highlight/comment on the things that stand out. Let's go! 🧡

16.01.2026 10:05 πŸ‘ 47 πŸ” 14 πŸ’¬ 1 πŸ“Œ 1
Post image

The 2025 Web Almanac by HTTP Archive has been officially released! πŸš€

We would like to thank all of our contributors from around the globe who made this extensive report possible!

Check out the full report here: almanac.httparchive.org

16.01.2026 03:00 πŸ‘ 64 πŸ” 37 πŸ’¬ 4 πŸ“Œ 13
Preview
Better defaults for popovers - Manuel Matuzovic I recently added a rule to my reset style sheet UA+ that I wanted to share with you.

I recently added a rule to my reset style sheet UA+ that I wanted to share with you.

matuzo.at/blog/2026/be...

16.01.2026 13:21 πŸ‘ 30 πŸ” 4 πŸ’¬ 3 πŸ“Œ 0
Preview
Accessible faux-nested interactive controls A really common user interface pattern is a big clickable area, such as a card. Sometimes you need controls within that card that are also clickable. There's lots of ways to do it wrong, but fret not,...

A really common user interface pattern is a big clickable area, such as a card. Sometimes you need controls within that card that are also clickable. There's lots of ways to do it wrong, but fret not, @ericwbailey.website is here to show you how to do it right.

piccalil.li/blog/accessi...

15.01.2026 12:18 πŸ‘ 60 πŸ” 16 πŸ’¬ 0 πŸ“Œ 1
Post image

Introducing the Astro 6.0 Beta.

- Redesigned dev server: run against the same runtime you deploy to
- First-class Cloudflare Workers support with workerd
- Stable Content Security Policy and Live Collections

It's never been a beta time to try Astro πŸ‘€

13.01.2026 20:24 πŸ‘ 158 πŸ” 22 πŸ’¬ 4 πŸ“Œ 6
Video thumbnail

Made a lil' library:
codepen.github.io/slideVars/

Automatically detects CSS custom properties on the :root/html and gives you controls for adjusting them. (But it's also as configurable as you want it to be.)

12.01.2026 18:52 πŸ‘ 287 πŸ” 34 πŸ’¬ 12 πŸ“Œ 4
Preview
Date is out, Temporal is in Temporal is the Date system we always wanted in JavaScript. It's extremely close to being available so Mat Marquis thought it would be a good idea to explain exactly what is better about this new JavaScript...

Temporal is the Date system we always wanted in JavaScript. It's extremely close to being available so Mat Marquis thought it would be a good idea to explain exactly what is better about this new JavaScript date system.

piccalil.li/blog/date-is...

07.01.2026 15:22 πŸ‘ 69 πŸ” 28 πŸ’¬ 2 πŸ“Œ 7
Preview
Get Blogging! A blog is an easy way to write on the web. Here's how to get started.

here’s how, via @werd.io: getblogging.org

06.01.2026 18:11 πŸ‘ 111 πŸ” 18 πŸ’¬ 2 πŸ“Œ 1

i love the beginning of the year because everyone starts blogging. and if you (yes you) were thinking about starting, this is your sign

06.01.2026 15:56 πŸ‘ 579 πŸ” 87 πŸ’¬ 24 πŸ“Œ 16
Video thumbnail

πŸŽ„ Happy holidays!

You can now import CSS custom properties into Engramma and get a flat list of design tokens, making it easier to migrate existing projects to standard format.

27.12.2025 13:40 πŸ‘ 13 πŸ” 4 πŸ’¬ 1 πŸ“Œ 0

Just gonna say this again for games sphere cus we get the same question:

Networking doesn't mean schmoozing up to famous people, it means making friends with your peers. Then in 10 years, 20, one of you might be famous? And sure you're still helping each other cus well yeah friends.

Make. Friends.

27.12.2025 00:06 πŸ‘ 3558 πŸ” 916 πŸ’¬ 61 πŸ“Œ 117

It's the Christmas issue of Famitsu, so that means many Japanese gaming industry folks gave their personal Game of the Year lists. I'll update this thread periodically since there's a lot of them once again.

24.12.2025 15:03 πŸ‘ 595 πŸ” 262 πŸ’¬ 4 πŸ“Œ 53
The End of Year Developer: A Nature Documentary
The End of Year Developer: A Nature Documentary YouTube video by Cassidy Williams

Behold, the end of year developer. An unflinching look at the survival period of "working" during the holidays.

www.youtube.com/watch?v=ps06...

23.12.2025 16:29 πŸ‘ 94 πŸ” 19 πŸ’¬ 2 πŸ“Œ 1

this is just being a SRE

18.12.2025 04:30 πŸ‘ 310 πŸ” 35 πŸ’¬ 9 πŸ“Œ 0
A post by c.a.t.y.a.y that reads, "I wonder what my art could've been if I didn't quit". Iggy responds, "I wonder what it will be if you start again"

A post by c.a.t.y.a.y that reads, "I wonder what my art could've been if I didn't quit". Iggy responds, "I wonder what it will be if you start again"

Going into 2026, a reminder for everyone who's fallen off the creative wagon, game dev, writing, art, music, whatever, no matter how long:

16.12.2025 03:22 πŸ‘ 9543 πŸ” 4799 πŸ’¬ 38 πŸ“Œ 138
Preview
Samsung halting SATA SSD production says leaker, warns of 18 months of SSD price pressure Samsung plans to stop making SATA SSDs in 2026, likely causing tighter supply and higher prices for SSDs over the next 18 months. βš οΈπŸ’Ύ

Samsung halting SATA SSD production says leaker, warns of 18 months of SSD price pressure

14.12.2025 09:32 πŸ‘ 49 πŸ” 14 πŸ’¬ 0 πŸ“Œ 78
Preview
Hell is other people's markup - HTMHell A collection of bad practices in HTML, copied from real websites.

On day 13 @lloydi.com presents one of my favourite debugging tools. #htmHellAdventcalendar

htmhell.dev/adventcalend...

13.12.2025 20:53 πŸ‘ 20 πŸ” 8 πŸ’¬ 2 πŸ“Œ 0

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.

These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

11.12.2025 20:51 πŸ‘ 175 πŸ” 71 πŸ’¬ 2 πŸ“Œ 26
Preview
Dealbreaker bugs in native popovers - Manuel Matuzovic I'm a frontend developer in Graz, specialized in HTML, accessibility, and CSS layout and architecture.

There are accessibility bugs in Popovers that hindered a client of mine from using them.

matuzo.at/blog/2025/de...

05.12.2025 08:39 πŸ‘ 11 πŸ” 3 πŸ’¬ 0 πŸ“Œ 0
SVG Filters - Clickjacking 2.0 A novel and powerful twist on an old classic.

Developer attempts to replicate "Liquid Glass" in CSS, and once finished realizes what she'd actually created is an exploit for a fundamental, previously unknown, and rather serious browser vulnerability

lyra.horse/blog/2025/12...

"CSS hack accidentally becomes regular hack"

05.12.2025 02:03 πŸ‘ 2041 πŸ” 582 πŸ’¬ 24 πŸ“Œ 37