Skip to main content

This site runs on WebMastro 4

1 minute read

WebMastro source code

The site you are reading is new, even if it looks like the old one. Since 23 September 2026 marcomastroddi.com runs on WebMastro 4, the PHP framework I build websites with, rewritten from scratch.

Why rewrite it

The old WebMastro built pages by gluing strings of HTML together. It worked, but every page had to remember to escape what it printed, and forgetting it once was enough to open a hole. WebMastro 4 builds every page as a tree of elements and writes it out once, at the end: text is escaped by default, and raw HTML is only possible where it is asked for by name.

What you get, without seeing it

  • Accessibility checked on every page. The target is WCAG 2.2 AA: headings in the right order, text for every image, a name for every link and button. Every page is checked automatically, and a page that does not pass does not go online.
  • A strict security policy. No script and no style is written inside the page, so the browser can be told to refuse anything that does not come from where it should.
  • Respect for your privacy. No analytics, no cookies, and the fonts are served by the site itself, not by Google.
  • Every language its own address. English and Italian pages, each with its own URL known to search engines, and every old link still leads to the right page.

What comes next

The same framework will soon run beebeep.net, which is ready and waiting for its turn. And soon this site will have a journal too.