075. Small Horn Sound by the Lake

X

中

I visited Xianghu Lake in Binjiang over the weekend and saw someone playing the trumpet. Just one person, one lake, and a trumpet—it had such a great vibe.

Record the down-to-earth trending technologies seen every week, and publish them here after screening. If you find it good, you can follow this weekly to get update notifications.

Technical Insights

The “Browser-in-the-Browser” Phishing Attack
https://mrd0x.com/browser-in-the-browser-phishing-attack/
A sophisticated phishing technique that simulates a separate browser window within the page to trick users into entering credentials on an apparently legitimate domain.

A JS Sandbox Stronger than eval or iframe
https://mp.weixin.qq.com/s/wAI-L3we6uK0HvvPtOcIjg
A look at the new ShadowRealm API, a Stage 3 JavaScript proposal that provides a more robust and secure way to execute code in an isolated environment.

AST: What Every Frontend Dev Needs to Know
https://juejin.cn/post/7087075805884809252
Follow this hands-on guide to finally understand Abstract Syntax Trees and how they power your favorite development tools.

Trending Open Source

jsii: Cross-Language Interop for JavaScript Classes
https://github.com/aws/jsii
The magic behind the AWS Cloud Development Kit. it allows you to build a library once in TypeScript and automatically provide idiomatic versions for Go, Java, Python, and more.

// TypeScript source
export class Greeter {
  public greet(name: string) {
    return `Hello, ${name}!`;
  }
}

// Go usage
greeter := NewGreeter()
greeter.Greet("World") // => Hello, World!

// Python usage
greeter = Greeter()
greeter.greet("World") # => Hello, World!

OSSArt: Turn your GitHub Activity into a Work of Art
https://getoss.art/generator
Simply enter your GitHub username to generate a beautifully abstract representation of your contributions that you can even print out.

Astro: The Next-Gen Static Site Builder
https://github.com/withastro/astro
Astro claims to be powerful while shipping zero JavaScript by default. I tried it out and the developer experience is fantastic—the project structure is incredibly clean.

Lexical: Facebook’s Extensible Text Editor Framework
https://github.com/facebook/lexical
A new, high-performance editor framework from the Meta team designed for accessibility and reliability.

Just Looking Around

Is the Era of Nike and Adidas in China Ending?
While Adidas’ global revenue grew by 15%, it only saw 3% growth in Greater China. Nike’s revenue in the region dropped by 11% over the first nine months. local brands are gaining serious ground.

Why Fujian’s GDP Per Capita is Now 4th in China
A surprising look at how Fujian has climbed to 4th place, trailing only Beijing, Shanghai, and Jiangsu—surpassing even Zhejiang and Guangdong.

What are the U.S. Tech Giants Up To?
A comparative look at Microsoft, Apple, Google, and Amazon, with a rather sharp critique of Meta’s current direction.

---