A thing which I just got frustrated by: in content-security-policy declarations like script-src, you're supposed to be able to use URLs so you can match not just hosts but also prefixes. For example this lets me make it so my website will only load JS from "https://example.org/static/js/" instead of any URL on my site like I'd get with "'self'". This is great especially if I have any UGC.
The thing I'm annoyed at is that the grammar for the host-part of the URL used in https://www.w3.org/TR/CSP3/#grammardef-host-part allows for a sequence of dotted parts so you can use an IPv4 address in there, like "http://127.0.0.1:3000/static/js/" but not for square brackets so you can't use an IPv6 address in there, like "http://[::1]:3000/static/js/"
At first I thought this was a bug in Firefox (because it sure does allow URLs like http://[::1]:3000/ in pretty much all other contexts) but it's actually part of the W3C standard for CSP.

You know those little plastic compartmentalised pill boxes they make with 7 segments and weekdays written on each pill? Turns out they do work and they are really convenient.

I had a pony step on my foot once when I was a kid. Didn't hurt or anything. It was a small pony, I was wearing wellington boots and I was standing on soft ground.