pustelto / personal_web Goto Github PK

Hello!

Just read your Optimizing CSS for faster page loads article, great read! As someone also curious about frontend performance, I decided to check how you were using responsive images and noticed that for your blog post images the sizes attribute is set as as: sizes="100vw, (min-width: 39.5rem) 608px".

The order of the media queries matter, and the first one that "matches" is selected. So the browser goes, oh the display size is 100vw, you got it! Therefore, users are requesting the largest (1800px) file in some cases (my browser window maximized on my display is 1905px wide, so the browser assumes the display size of the image is 1905px).

Just reverse the order sizes="(min-width: 39.5rem) 608px, 100vw" and I think you'll shave off some KBs. I was going to fork and make the one line contribution, but I haven't used eleventy before and so I'm not sure how to build and test.

检测到 Pustelto/personal_web 一共引入了1019个开源组件，存在34个漏洞

漏洞标题：serialize-javascript 代码问题漏洞
缺陷组件：[email protected]
漏洞编号：CVE-2020-7660
漏洞描述：Verizon serialize-javascript是美国威瑞森电信（Verizon）公司的一款支持将JavaScript序列化为 JSON超集的软件包。
serialize-javascript 3.1.0之前版本中存在代码问题漏洞。远程攻击者可借助index.js文件中的‘deleteFunctions’函数利用该漏洞注入任意代码。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-53801
影响范围：(∞, 3.1.0)
最小修复版本：3.1.0
缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]
[email protected]>[email protected]>[email protected]

另外还有34个漏洞，详细报告：https://mofeisec.com/jr?p=a159e3