Sources

Authoritative Sources

The definitions, principles, and practices in this pack are grounded in the following primary and widely recognised sources. Standards bodies (W3C, WHATWG, IETF), the maintained web platform documentation (MDN), and Google's web.dev performance guidance are cited where a concept has a canonical reference.

Web Platform Documentation

  • MDN Web Docs - HTML, CSS, JavaScript, and Web APIs reference. https://developer.mozilla.org/
  • MDN Web Docs - CSS Grid Layout guide. https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_grid_layout
  • MDN Web Docs - Flexbox guide. https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_flexible_box_layout
  • MDN Web Docs - Web Components. https://developer.mozilla.org/en-US/docs/Web/API/Web_components

Standards and Specifications

  • HTML Living Standard - WHATWG. https://html.spec.whatwg.org/
  • DOM Living Standard - WHATWG. https://dom.spec.whatwg.org/
  • ECMAScript Language Specification - TC39 / Ecma International. https://tc39.es/ecma262/
  • Content Security Policy Level 3 - W3C. https://www.w3.org/TR/CSP3/
  • Web Content Accessibility Guidelines (WCAG) 2.1 - W3C Recommendation. https://www.w3.org/TR/WCAG21/
  • ARIA Authoring Practices Guide (APG) - W3C. https://www.w3.org/WAI/ARIA/apg/
  • Subresource Integrity - W3C. https://www.w3.org/TR/SRI/

Performance and Core Web Vitals

  • web.dev - Core Web Vitals. https://web.dev/articles/vitals
  • web.dev - Largest Contentful Paint (LCP). https://web.dev/articles/lcp
  • web.dev - Interaction to Next Paint (INP). https://web.dev/articles/inp
  • web.dev - Cumulative Layout Shift (CLS). https://web.dev/articles/cls
  • Google Lighthouse documentation. https://developer.chrome.com/docs/lighthouse/overview

Frameworks and Tooling

  • React Documentation. https://react.dev/
  • Angular Documentation. https://angular.dev/
  • Vue.js Documentation. https://vuejs.org/guide/introduction.html
  • Svelte Documentation. https://svelte.dev/docs
  • Vite Documentation (build tooling, HMR). https://vite.dev/guide/
  • TypeScript Handbook. https://www.typescriptlang.org/docs/

Security

  • OWASP Top Ten (web application security risks). https://owasp.org/www-project-top-ten/
  • OWASP Cheat Sheet Series (XSS Prevention, Content Security Policy). https://cheatsheetseries.owasp.org/
  • MDN - Cross-site scripting (XSS). https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/XSS