What prevents me from just calling "postMessage" directly myself, which does nothing to prevent the "sanitation" that the replace function call there is supposed to do?
Please sanitize messages on the server instead.
1,762 karma · joined May 20, 2016
Senior Cloud Architect and DevOps Expert Engineer at Elastisys
https://www.linkedin.com/in/llarsson
https://elastisys.com/
What prevents me from just calling "postMessage" directly myself, which does nothing to prevent the "sanitation" that the replace function call there is supposed to do?
Please sanitize messages on the server instead.
Raster image support should also be able to support stuff drawn on a canvas element, so I think it is a great place to start.
The article explains what it is, and champions it (perhaps to get the click friendly title, perhaps legitimately). But I have never felt the need to "run" a website in a separate "app".
If you use these, and can see their use case, please help me understand. Is the point that the web browser opens a new window and hides its toolbar to give you more screen real estate? Changes icon to match the favicon, so it is easier to switch to that window later?
What usability features am I missing out on if I just go to the website in my regular browser window, like the caveperson I suppose I am? :)
Threads, processes, shared memory, synchronized access, pipes, file descriptors, ...
The list goes on, but at the end of the day, basically all higher level constructs boil down to these system primitives. Understand these, and you have a much better foundation to understand high level concepts built on top of them.
It does not sound to me like the Chrome app was infected, just told to open a page.
Yes, ASK has it, but it is not at all smart about figuring out what word I mean if I happen to not start my gesture on the exactly right starting letter.
"This project was started long before CentOS or other projects were available."
I bet the have calculated that their work maintaining this is rather simple and well-worth it, or they would have changed over to CentOS a long time ago.
If you just run it in your own CI/CD pipeline: no.
If you want to offer this as a SaaS: yes.
If you want to extend this somehow: yes.
And thank you to all the countless developers who have made this level of fiddling mostly a thing of the past. At least this blog did not have to mention modelines.
In one case, you pay a premium so that somebody else worries about all details and maintenance, and in the other, you take on that burden but don't pay the premium. This has always been true for everything where a service is provided to you.
Great if your needs are small or not well known because there is no initial investment, but bad in the long run.
Just don't leave it running in a place where you see it and only check it every hour or so. A virtual desktop far away.
Turn off notifications.
Mute all channels, except ones that really matter to your work.
Feel culturally pressured to respond quickly? Set your status to "in a meeting". That will by default clear after an hour, mind you.
Until your company culturally agrees that "I did not meet my expected output because I was too busy on Slack" is acceptable, you are responsible to do what is needed to get your job done.
That it is intentional does not really help, because you still have to deal with the inherent awkwardness of not knowing if your tone and message come across correctly in a one-way conversation without feedback.
Before kids? Sure. After the kids are old enough to basically be on cruise control? Likely. But now? Not even close.
I love solving the odd chess problem here and there, and I whole-heatedly recommend lichess.org for that. The website and app are both great and the problem database is huge and varied. All free, too.
This is how I feel about vim, at any rate.
So they are then beholden to major platforms such as Google to host sites for them from a global cache? Similar to what AMP does, but for all kinds of content?
Hmm.
By flushing versions and integrity checks down the toilet, this new one could probably easily reduce traffic much further! What a great idea.
Because I cannot imagine anyone will use this unironically as their browser on their Linux desktop.
What the actual fuck?
Does, I don't even know, the UN(?) need to send in election overseers or something?
How is this even possible?
This piece (disclaimer: I am the author) makes the case that in our post-Privacy Shield world, a multi-cloud strategy is not just a nice-to-have, but rather a necessity.
Thankfully, due to new technology such as Kubernetes and other cloud-native software, such a strategy is within grasp more than ever before.
It's like being amazed that tech people all seemingly go to a message board run by a single venture capital firm to congregate, even if the number of users who have an actual business agreement with said firm is essentially a rounding error of the total.