New on the web platform in February, 2021

Your timers might not fire. Deal with it😎

WorkerDOM but not in user land

Inline threads in JS

Mozilla being short-sighted. Feb 21 edition

AMP, but !AMP

I wrote a blog post because my blog had bad CLS

Further progress on origin isolation

A proposal for a non-broken history API

TIL

Dear my bank in particular

Caja is both deprecated and has unfixed vulns. Use DOMPurify

NPM and other package registries dangerously allow private packages in the same namespace as public packages and prefer public packages