Raindrop.io Bookmarks 2026-02-25

2026年2月25日

• Zero-Day CSS: Deconstructing CVE-2026-2441 Security Vulnerability

  "The exploit was elegant in its simplicity: it used only standard CSS constructs but relied on Chrome's specific behavior of eagerly resolving @import chains and re-evaluating selectors after each new stylesheet arrived. Firefox and Safari didn't exhibit the same eager re-evaluation behavior, which is why the CVE was Chrome/Chromium-specific."

• Accessibility Assistant for Figma v52 :: Aaron Gustafson

  "Annotations are now presented as Figma-native Dev Mode annotations; this greatly reduces the working overhead of the plugin and reduces visual clutter in the document. We've also color-coordinated the icons in the Annotation Set viewer to the labels you see in the Dev Mode annotations, making it easier to scan."

• Potentially Coming to a Browser :near() You | CSS-Tricks

  "A good question to ask before using :near() is: "Are we being preemptive or presumptive?" Preemptive can be good but presumptive would always be bad, as we never want users to think that they're hovering or focusing on an interactive element when they're not (or not yet)."

• The Death of the 'Pure' Frontend Developer: Why Modern Frontend Is Becoming Full-Stack DevOps

  "The frontend developer now queries databases, configures caching layers, writes middleware that runs at the edge, and owns deployment pipelines. This is not a prediction. It is the current state of job listings, framework defaults, and team structures at product companies shipping on modern stacks."

• Life after Figma is coming (and it will be glorious)

  "As product, design and engineering collapse together, design interfaces will start to look more like dependencies in the code itself."

• Ladybird adopts Rust, with help from AI - Ladybird

  "This is not becoming the main focus of the project. We will continue developing the engine in C++, and porting subsystems to Rust will be a sidetrack that runs for a long time. New Rust code will coexist with existing C++ through well-defined interop boundaries."

• WebMCP: Official W3C Standard for AI Agent Browser Interaction

  "WebMCP (Web Model Context Protocol) is a W3C Community Group standard that enables browsers to expose structured tools to AI agents through the navigator.modelContext API. Jointly developed by Google and Microsoft, WebMCP transforms how AI agents interact with web applications by shifting from unreliable DOM manipulation and visual recognition to semantic, tool-based protocols."

• mgifford/ACCESSIBILITY.md: A template for an standardized ACCESSIBILITY.md file.

  "Just as SECURITY.md defines how to handle vulnerabilities, ACCESSIBILITY.md defines the inclusive state of a project. It is a machine-readable and human-navigable manifest that tracks a project's commitment to accessibility (a11y) through metrics, guardrails, and automated enforcement."