# 75. Small Horn Sound by the Lake

> I visited Xianghu Lake in Binjiang over the weekend and saw someone 

- Issue: 75
- Published: 2022/04/26
- HTML: https://weekly.tw93.fun/en/posts/75
- JSON: https://weekly.tw93.fun/api/en/posts/75.json
- Chinese original: https://weekly.tw93.fun/posts/75.md

---

<img src="https://gw.alipayobjects.com/zos/k/k1/0zUCeB.jpg" width="800" />

<small>I visited Xianghu Lake in Binjiang over the weekend and saw someone [playing the trumpet](https://cdn.tw93.fun/blog/upic/nidn1X.mp4). Just one person, one lake, and a trumpet—it had such a great vibe.</small>

> **Record the down-to-earth trending technologies seen every week, and publish them here after screening. If you find it good, you can follow this weekly to get update notifications.**

## Technical Insights

**The "Browser-in-the-Browser" Phishing Attack**  
<https://mrd0x.com/browser-in-the-browser-phishing-attack/>  
A sophisticated phishing technique that simulates a separate browser window within the page to trick users into entering credentials on an apparently legitimate domain.

**A JS Sandbox Stronger than eval or iframe**  
<https://mp.weixin.qq.com/s/wAI-L3we6uK0HvvPtOcIjg>  
A look at the new ShadowRealm API, a Stage 3 JavaScript proposal that provides a more robust and secure way to execute code in an isolated environment.

**AST: What Every Frontend Dev Needs to Know**  
<https://juejin.cn/post/7087075805884809252>  
Follow this hands-on guide to finally understand Abstract Syntax Trees and how they power your favorite development tools.

## Trending Open Source

**jsii: Cross-Language Interop for JavaScript Classes**  
<https://github.com/aws/jsii>  
The magic behind the AWS Cloud Development Kit. it allows you to build a library once in TypeScript and automatically provide idiomatic versions for Go, Java, Python, and more.

```js
// TypeScript source
export class Greeter {
  public greet(name: string) {
    return `Hello, ${name}!`;
  }
}

// Go usage
greeter := NewGreeter()
greeter.Greet("World") // => Hello, World!

// Python usage
greeter = Greeter()
greeter.greet("World") # => Hello, World!
```

**OSSArt: Turn your GitHub Activity into a Work of Art**  
<https://getoss.art/generator>  
Simply enter your GitHub username to generate a beautifully abstract representation of your contributions that you can even print out.  
<img src="https://cdn.tw93.fun/blog/upic/idK7Ni.jpg" width="800" />

**Astro: The Next-Gen Static Site Builder**  
<https://github.com/withastro/astro>  
Astro claims to be powerful while shipping zero JavaScript by default. I tried it out and the developer experience is fantastic—the project structure is incredibly clean.  
<img src="https://cdn.tw93.fun/blog/upic/WNQno0.jpg" width="800" />

**Lexical: Facebook’s Extensible Text Editor Framework**  
<https://github.com/facebook/lexical>  
A new, high-performance editor framework from the Meta team designed for accessibility and reliability.  
<img src="https://cdn.tw93.fun/blog/upic/VzAvsW.jpg" width="800" />

## Just Looking Around

**Is the Era of Nike and Adidas in China Ending?**  
While Adidas' global revenue grew by 15%, it only saw 3% growth in Greater China. Nike’s revenue in the region dropped by 11% over the first nine months. local brands are gaining serious ground.

**Why Fujian’s GDP Per Capita is Now 4th in China**  
A surprising look at how Fujian has climbed to 4th place, trailing only Beijing, Shanghai, and Jiangsu—surpassing even Zhejiang and Guangdong.

**What are the U.S. Tech Giants Up To?**  
A comparative look at Microsoft, Apple, Google, and Amazon, with a rather sharp critique of Meta’s current direction.