jfhr's blog

The Open Web Application Security Project has a page with general recommendations for security-related HTTP header fields, such as: Content-Security-Policy Strict-Transport-Security Permissions-Policy and more.

One of the advantages of HTML is that it can be streamed.

#1 - after submission This can be useful for forms that are intended to be submitted multiple times.

GitHub uses this code snippet on its homepage to advertise its AI programming assistant Copilot: import { fetch } from "fetch-h2"; // Determine whether the sentiment of text is positive // Use a web service async function isPositive(text: string): Promis…

I've recently published html2tumblr, a website and web API that converts HTML into posts on the blogging service tumblr.

JavaScript is a dynamically-typed language, which means that any array can contain a combination of values of different types.

Fungible Tokens and Decentralized Exchanges 1.

Consider using CSV At my current job, I write a lot of microservices that communicate via HTTPS.

Talking to Yourself Many years ago I read a book called Momo.

This article shows a method of estimating the number of documents in a Firestore collection by reading only a small number of documents.

You've probably heard that HTTPS makes websites more secure.

What is an eTLD + 1?

Tl;dr this blog now has a slightly new design, a dark mode, and better loading performance.

This post is a short introduction to smart contracts: How they work, what you can do with them, and how to develop and interact with one. 1.

I previously blogged about optimizing images with the HTML <picture> tag.

If you have a website, you probably want it to be fast.

See also Wesley Aptekar-Cassels' post End-to-end testing emails for an alternative approach that uses playwright and a local SMTP server.

Note: This article from 2021 talks about an HTTP feature that is now obsolete and unshipped or intended to be unshipped by all major browsers.

Build automation with JavaScript and zx zx is an open-source tool by google for creating server-side scripts with JavaScript.

The DeconstruCT.F 2021 I played in the DeconstruCT.F 2021 with ps1ttacus!

The Down Under CTF 2021 Yesterday, I played in my very first organized Capture-the-Flag game, the DownUnderCTF 2021.

If you search for "check online JavaScript", you'll quickly come across the navigator.onLine property.

document.designMode = "on"; This single line of JavaScript makes an entire webpage editable.

Mighty I've recently read about the project Mighty.

Start an app with Angular 12 and Bootstrap 4 Skip to main content 2021-05-30 Before you start, there's also a guide for bootstrap 5 here.

Before you start, there's also a guide for bootstrap 4 here.

Let's say you have an Angular single-page app and use Bootstrap for styling.