Jxck

Risks of premature polyfilling

8

```js import { storage } from "std:async-local-storage|https://somecdn.com/async-local-storage.js"; ``` in this case, browser shipping std:async-local-storage which is different api from fallback js polyfill, will seems break application. (details are in https://w3ctag.github.io/polyfills/#risks-of-premature-polyfilling...

Heading Highlighting problem

1

from this commit https://github.com/plasticboy/vim-markdown/commit/3f34995e77ea238730d3a08fc051647282922af6 cause highlight heading from  to  I wanna highlight `#` too as previous. so, could you give us a option to switching previous mode ?

https://tools.ietf.org/html/draft-ietf-httpbis-variants-06#section-2 ```http Variants: Accept-Encoding=(gzip br), Accept-Language=(en fr) ``` [result](https://jxck.github.io/structured-field-values/demo.html#QWNjZXB0LUVuY29kaW5nPShnemlwIGJyKSwgQWNjZXB0LUxhbmd1YWdlPShlbiBmcik=) Uppercase in Field name is not valid Dict key of SFV. It should be lowered before encoding. ```http Variants: accept-encoding=(gzip br),...

> NOTE: Some existing user agents do not support the Max-Age attribute. User agents that do not support the Max-Age attribute ignore the attribute. https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-11.html#section-4.1.2.2-3 Is there any known client...

[translation request] RFC 9458 OHTTP

2

Hi, IETF published new RFC for Oblivious HTTP https://www.rfc-editor.org/rfc/rfc9458.html It's very important standard for make internet secure and safe for privacy. It'd be nice if you publish translation of this...

add `contentEncoding` to Resource Timing. closed #381. *** Preview | Diff

[WIP] Update secure-headers align with best current practice

1

closes: #2540 update headers in secure-headers middleware align with best practices. 1. `Referrer-Policy` to `strict-origin-when-cross-origin` as I filed #2540 , `no-referer` also make `origin` header to `null`. `origin` header is...

default referrer-policy for secure-headers middleware

2

### What is the feature you are proposing? # Default Referrer-Policy for secure-headers middleware Currently the default referrer-policy is `no-referrer`. https://github.com/honojs/hono/blob/main/src/middleware/secure-headers/index.ts#L73 When referrer-policy sets no-referrer, it also hides not only...

support CSP nonce for `<Script>` component

1

### What is the feature you are proposing? https://github.com/honojs/honox/blob/main/src/server/components/script.tsx `` component doesn't supports `nonce` value for CSP. It's required to serve nonce based CSP for security practices.

[css-paint-api] why no fillText/strokeText ?

2

I'm trying Paint API but I found that there is no `fillText()`, `strokeText()` in canvas context which I wanna use. https://drafts.css-houdini.org/css-paint-api/#2d-rendering-context > Note: The PaintRenderingContext2D implements a subset of the...