Introducing EmDash — the spiritual successor to WordPress that solves plugin security

EmDash Feedback

So, two other Matts at Cloudflare announced EmDash — the spiritual successor to WordPress that solves plugin security. (Is it nominative determinism or a simulation glitch that everyone trying to t…

EmDash

The Astro-native CMS. A modern successor to WordPress with type-safe content, plugin extensibility, and portable deployment.

emdash/rfcs/0001-plugin-registry.md at wip/plugin-rfc · emdash-cms/emdash

EmDash is a full-stack TypeScript CMS based on Astro; the spiritual successor to WordPress - emdash-cms/emdash

Improving the trustworthiness of Javascript on the Web

Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.

Introducing Bare: Actually run Javascript Everywhere - Pears

The Holepunch team has introduced Bare, a groundbreaking minimal JavaScript runtime designed for both desktop and mobile. Built to be fast, modular, and efficient, Bare revisits the original vision of Node.js by embracing modularity and universal compatibility.

mokeyish/obsidian-code-emitter

An obsidian plugin that allows code blocks executed interactively in sandbox like jupyter notebooks. Supported language rust、kotlin、python、Javascript、TypeScript etc.

Kyushu

A self-hostable Wasm sandbox for JavaScript workers.

Vite+

The Unified Toolchain for the Web

Defeating Prompt Injections by Design

Large Language Models (LLMs) are increasingly deployed in agentic systems that interact with an untrusted environment. However, LLM agents are vulnerable to prompt injection attacks when handling untrusted data. In this paper we propose CaMeL, a robust defense that creates a protective system layer around the LLM, securing it even when underlying models are susceptible to attacks. To operate, CaMeL explicitly extracts the control and data flows from the (trusted) query; therefore, the untrusted data retrieved by the LLM can never impact the program flow. To further improve security, CaMeL uses a notion of a capability to prevent the exfiltration of private data over unauthorized data flows by enforcing security policies when tools are called. We demonstrate effectiveness of CaMeL by solving $77\%$ of tasks with provable security (compared to $84\%$ with an undefended system) in AgentDojo. We release CaMeL at https://github.com/google-research/camel-prompt-injection.

PACT: Anonymous Credentials for the Web – Mozilla Hacks - the Web developer blog

A deeper look at PACT: a new initiative to tackle the rising tide of CAPTCHAs on the web whilst keeping the web open and preserving user's privacy.

Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web

Not Subtle, Just Sabotage — An API Against the Web

mary-ext/anartia

JavaScript-optional public web frontend for Bluesky.

Payload: The Next.js Headless CMS and App Framework

Built with TypeScript and React, Payload is an open-source headless CMS and application framework. Build anything.