Introducing the Cloudflare PHP Capture the Flag challenge
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our…
blog.cloudflare.com
$ webdevs --topic web-apps
Latest inweb apps_
Frontend craft, platforms, performance, and product engineering.
Today
// 27 Oct2 linksWhat took the Internet offline in Q3 2026
An examination of global Internet disruptions observed by Cloudflare Radar during the third quarter of 2026. This review analyzes how power failures, natural disasters…
blog.cloudflare.com
Yesterday
// 26 Oct4 linksType Server Protocol
github.comdiscuss on hn ↗
Nietzschian Debugger
github.comdiscuss on hn ↗
CSS-Tricks has a new owner
css-tricks.comdiscuss on hn ↗
Websites Should Be Printable
brennenputh.mediscuss on hn ↗
Earlier
// 23 Oct12 linksOrigin Range Requests: Serving large files without range-request tuning
Naive byte-range caching can waste gigabytes of origin bandwidth on small requests. We rebuilt our cache architecture in Pingora to coordinate partial fetches…
blog.cloudflare.com
Migrate Your 300-Node Redis Cluster to Just 3 Lavik Nodes
lavik.devdiscuss on hn ↗
Localizing compliance at scale: achieving South Korea’s ISMS certification
Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths…
blog.cloudflare.com
8 eMudhra certificates are compromised. Here's what you need to know
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the…
blog.cloudflare.com
Introducing tsrs: A port of TypeScript to Rust
Cloudflare is collaborating on tsrs, a Rust port of TypeScript that is up to 8x faster and uses 70% less memory.
blog.cloudflare.com
Continuous accountability for Verified bots
Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like…
blog.cloudflare.com
Staying Evergreen: How we automated secure access and repo hygiene in a shared org
Put native GitHub features to work to review outside collaborator access and archive stale repositories. The post Staying Evergreen: How we automated secure access and…
github.blog
A fully programmable secure web gateway
Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare…
blog.cloudflare.com
GitHub availability report: September 2026
In September, we experienced two incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: September 2026 appeared…
github.blog
From 2,500 requests to 24: Rebuilding star history without the stargazers
Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we…
github.blog
New to the web platform in September
Discover some of the interesting features that have landed in stable and beta web browsers during September 2026.
web.dev
August 2026 Baseline monthly digest
Read about various happenings with Baseline during August 2026.
web.dev
grep: no matches