Bookmarks

Are you using regex to validate URLs? Learn from a CVE identified in the node-forge npm package that was using a regex pattern to validate URLs and resulted in a security vulnerability.

An in-depth tutorial that teaches how to create one of the most adorable interactions I've ever created. We'll learn how to use React components and hooks to abstract behaviours, and see how to design the perfect API. Even if you're not into animations, I think you'll find it interesting!

This year, the React team unveiled something they've been quietly researching for years: an official way to run React components exclusively on the server. This is a significant paradigm shift, and it's caused a whole lot of confusion in the React community. In this tutorial, we'll explore this new world, and build an intuition for how it works, and how we can take advantage of it.

Hydration refers to JavaScript frameworks making server-side rendered HTML interactive.

Set of tests to evaluate and compare the compatibility of different GraphQL gateways with Apollo Federation.

Briefly exploring core concepts around Node API security with regards to GraphQL and REST API design with code examples specific to Node.js application servers.

Explore three different ways to control your Inngest Function's runs.

Fine-tuned models empower organizations to receive code suggestions specifically tailored to their coding practices and internal languages.

This blog is based on our conversation with Harsh Modi, Senior Security Engineer at Bell. It explores what are the benefits of pentesting, and its real-world implications.

Let's check out 5 major HTTP libraries we can use for Node.js and dive into their strengths and weaknesses.

Rails partials have been around for years, but now strict locals have entered the scene to make things easier for us.

tl;dr: Node by default doesn’t implement the Happy Eyeballs algorithm for web requests, and therefore if a server has a broken IPv6 address that responds first, it will usually fail. This is the story of how an otherwise working server was completely unavailable for users in a geographic region, and how in one very specific way Node doesn’t handle requests as well as an Opera browser from 2011. How we got here: the Checkly Coralogix integration By now you’ve heard of the Checkly Coralogix integration, part of a broader strategy at Checkly of embracing OpenTelemetry and using Checkly to give you insight into backend services’ performance. Released a couple of months ago, this integration lets you set some configuration options in Checkly to send our synthetic monitoring (a fancy term for scheduled end-to-end tests) traces to Coralogix. Once the integration is enabled you’ll see connected traces linked from the Checkly interface: A Checkly trace with a link to Coralogix And you can find the detailed reports from your synthetic monitoring in the Coralogix dashboard. This feature, combined with our CLI and support for Monitoring as Code, mean that your whole team can be involved in a shift left of monitoring, sharing monitoring results more broadly and making multiple teams aware of monitoring data on systems that were previously a black box.A backend trace kicked off with a Checkly request, including the information from the Checkly runner The problem: it worked fine for us, but not in US-East-1 When testing the integration feature, one of the steps was selecting the Coralogix server where Checkly should send data, based on its region. For us in EU-2 it was working great, but when the Coralogix VP of Product tried it, it wasn’t working at all. We quickly found the difference: he was using US-EAST-1 and that was failing consistently. What could the matter be? As this transition happened around the time we shifted to ephemeral pods, we were tempted to blame architectural...

conference management system.

Wealthfolio is a simple, desktop-based investment tracker. Your financial data is stored safely on your own computer. No subscriptions, no cloud.

A Beautiful Private and Secure Desktop Investment Tracking Application - afadil/wealthfolio

Do "outline speedrunning": Recursively outline an MVP, speedrun filling it in, and only then go back and perfect. This is a ~10x speed up over the 'loading-bar' style (more on that below) Don't just read this article and move on. Go out and do this for the very next thing you make so y

こんにちは。技術本部Sansan Engineering Unit Master Data Groupの古本です。 普段は、営業DXサービス「Sansan」の名刺交換した人や企業に関するニュースを表示し、お知らせする「企業ニュース」や「企業情報」を扱うシステムの開発をしています。最近、マイクロサービスで作られた企業ニュ…

With Rails 7.1, `ActiveRecord::Batches` now supports multi-column ordering for models with composite primary keys, enabling separate ascending or descending order for each key.

A Browser Extension for Enhanced Web Accessibility Checking - ymrl/a11y-visualizer

Routing concerns allow you to declare common routes that can be reused inside other resources and routes.

Embracing the digital experience

After installing your Ruby development environment, you might find yourself in the void thinking what...

Liminal is an old-school discussion forum reborn for modern teams.

The ultimate Rapid Application Development Toolkit (RADKit) for Rails Application Development - radioactive-labs/plutonium-core

This post covers how to run on Rails main rather than a released version for developing your web application.

Learn how to implement a secure, cookie-based authentication system in Ruby on Rails with this in-depth course.

It'll bite you some day

Fukuoka RubyistKaigi 04 https://regional.rubykaigi.org/fukuoka04/