Do you delegate web security to security specialists or are you responsible yourself for implementing web security features and practices? The W3C SWAG CG survey asks this and other questions and we would value your input as we create Web Security documentation […]

We've written a new guide on Passkeys! Passkeys address many of the most serious weaknesses of other authentication methods. In this guide we will: - Introduce you to the WebAuthn API - Go through registration and sign-in flows - Give an overview of the security properties of passkeys - […]

Learning about WebViews at the #fosdem Browsers & Web Platform dev room, including the https://caniwebview.com site that (much like CanIUse) tells developers which features are available in which webviews – using BCD data maintained by OpenWebDocs (which was presented earlier by @patrickbrosset).

We've written a new guide on Passkeys! Passkeys address many of the most serious weaknesses of other authentication methods. In this guide we will: - Introduce you to the WebAuthn API - Go through registration and sign-in flows - Give an overview of the security properties of passkeys - […]

RE: https://mas.to/@patrickbrosset/115695467325719901 In 2025, we systematically collected compat data for 28 browser releases: Firefox 135 - 147 Chrome 133 - 144 Safari 18.4, 26, 26.2 We're keeping your compat tables up-to-date.

React2Shell reflects a prototype pollution bug. We recently wrote about how defend against prototype pollution attacks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution

We've written a new guide on one-time password (OTP) authentication. The article discusses three common implementations for one-time passwords: E-mail, SMS, and time-based one-time passwords (TOTP). We recommend TOTP in this comparison. Learn why […]

Hanging out with the awesome, hand chiseled, @openwebdocs crew @estelle, @floscholz and Will Bamberg at @w3c #tpac in Kobe!

We're creating a new series of articles about Authentication. Our first new guide is about classic passwords -- the original method to authenticate and still the most common on the web. A refresher about password attacks, defenses and best practices […]

We've written a new guide on JavaScript Prototype Pollution and how to defend against it: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution Many thanks to @joshcena, Aaron Shim, and Maurice Dauer for your help and feedback.

We've written a new guide on JavaScript Prototype Pollution and how to defend against it: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Prototype_pollution Many thanks to @joshcena, Aaron Shim, and Maurice Dauer for your help and feedback.

We've written a new guide on Supply Chain Attacks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Supply_chain_attacks Many thanks to the W3C SWAG CG and @ljharb for the reviews and feedback! #websecurity

We've written a new guide on Supply Chain Attacks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Supply_chain_attacks Many thanks to the W3C SWAG CG and @ljharb for the reviews and feedback! #websecurity

We're happy to share that @sovtechfund invests in Web Security and Privacy Documentation! Over the coming year, Open Web Docs will be working on creating and updating Security and Privacy documentation for web developers on @mdn. Full announcement […]

We're happy to share that @sovtechfund invests in Web Security and Privacy Documentation! Over the coming year, Open Web Docs will be working on creating and updating Security and Privacy documentation for web developers on @mdn. Full announcement […]

We've written a new guide on XS-Leaks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XS-Leaks Many thanks to @freddy, Hamish Willee, @MartinaKraus11, and @terjanq for your reviews and collaboration. #websecurity

We've written a new guide on XS-Leaks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XS-Leaks Many thanks to @freddy, Hamish Willee, @MartinaKraus11, and @terjanq for your reviews and collaboration. #websecurity

Launching the W3C Docs Community Group https://openwebdocs.org/content/posts/w3c-docs-cg/

Reducing the transport size of HTTP responses with a compression dictionary. New MDN article written by @tunetheweb and reviewed by Will Bamberg. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Compression_dictionary_transport

W3C Docs CG As presented at the W3C Breakouts Day last week, we're considering launching a W3C Documentation Community Group. A place for technical writers, specification authors, and web developers to meet and discuss docs with the goal of providing a better understanding of web technologies […]

Thank you @igalia for renewing your Open Web Docs membership and sponsoring us again in 2025! 💜 Igalia has been sponsoring OWD for the 5th time already! Sustainable funding allows us to maintain documentation in the long-term.

We're continuing our journey through attacks and defenses on the web platform. We've now written new documentation about Cross-Site Request Forgery (CSRF) attacks: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/CSRF Thank you @freddy for the reviews!

Thank you for becoming a monthly OWD supporter on our Open Collective, @andreu 💜 https://opencollective.com/open-web-docs

Tomorrow is W3C Breakouts Day! You can join online! We're leading a session to talk about documentation for web technologies and whether we need a more regular place to discuss in form of a W3C Docs Community Group. Session link […]

We're happy to announce that Bloomberg joins Open Web Docs! “By supporting OWD, Bloomberg is investing in the long-term sustainability of the open web. We’re ensuring that developers have the tools they need to build, create, and maintain a healthy and accessible web for everyone.” says Alyssa […]

Now at #FOSSBackstage: @jorydotcom & @floscholz double ack presenting the economics of @openwebdocs#fossbackstageand about how documentation is critical digital infrastructure.

Good morning from Berlin, where #fossbackstage is kicking off! Looking forward to learning about what's "behind the scenes" with Open Source and supporting my friends @jorydotcom and @floscholz at their talk on the economics of @openwebdocs.

Open Web Docs 2024 Report We're reflecting on our fourth year of ensuring the long-term health of web platform documentation https://openwebdocs.org/content/reports/2024/

Find us at #fosdem2025 this weekend! @floscholz and @torgo#fosdem2025will be in Brussels and are happy to chat about OWD! Saturday: Tool the Docs room: https://fosdem.org/2025/schedule/track/docs/ Sunday: Funding the FOSS Ecosystem room: https://fosdem.org/2025/schedule/track/funding/

Learn about XSS for XMAS! We created a new MDN page about Cross-site scripting: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XSS #websecurity