@tbroyer@piaille.fr avatar

tbroyer

@tbroyer@piaille.fr

Web development (frontend, Web APIs), Web app security, build tools, Java, Kotlin, Gradle, etc.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

tbroyer, to random
@tbroyer@piaille.fr avatar

Ha ha, this is a fun (sic) phishing attempt:

  • mail posing as an UAE bank
  • but sent from an indian investment firm (with valid SPF, DKIM and DMARC, so probably a vulnerable/misconfigured SMTP server on their end);
  • call-to-action links to the canadian "bikers against pedophiles"' (‽) staging website (a page under wp-includes, so probably leveraging a WordPress vulnerability)
  • that redirects to a page on the czech Pandora website
  • that mimics the UAE bank, asking for credit card details (phishing page has already been removed and I forgot taking a screenshot a few hours ago)

melix, to random French
@melix@mastodon.xyz avatar

"Essayons et si ça ne marche pas, on aura appris quelque chose". Cette maxime, souvent vantée, est pourtant trompeuse. Sous couvert de bons sens, elle est largement utilisée dans le management pour justifier des décisions basées uniquement sur l'intuition, ou pire, la croyance. Pourtant, c'est ignorer que certains échecs sont prévisibles.

tbroyer,
@tbroyer@piaille.fr avatar

@melix Pour les groupes de niveau, c'est peut-être pas si tranché: https://x.com/JulienPain/status/1755703776747417793?s=20

> Une étude Pisa aboutit toutefois à une conclusion différente. Elle explique que ces groupes de niveaux peuvent être utiles. Mais à deux conditions. D'abord que ces groupes soient limités à certaines matières - pas à tous les enseignements. C'est le cas avec la réforme de G. Attal
> Mais aussi que ces groupes soient limités dans le temps, ce qui ne serait pas a priori le cas ici.

D'après les réponses sur X, ça serait en place en Suisse avec de bons résultats 🤷

scrwd, to random
@scrwd@mastodon.social avatar

Just a thought - not necessarily a good one - if I created a custom element <site-layout> and use it to insert blocks of content into specific <slot> elements it could create for quite lean pages - but I guess it would mean using shadow dom too…

I wonder if this something @enhance_dev makes better - I need to take a look again.

&lt;site-layout&gt;  
 &lt;h1 slot="header&gt;Title&lt;/title&gt;  
 &lt;nav slot="sidebar"&gt;…&lt;/nav&gt;  
 &lt;main slot="content"&gt;…&lt;/main&gt;  
&lt;/site-layout&gt;
tbroyer,
@tbroyer@piaille.fr avatar

@scrwd That's definitely where Enhance or WebC would shine (IIRC, Marko too, probably Astro as well).
You'd "just" be using the custom element syntax for server-side templating though, not a "true" web component, so you could just as well use other server-side templating languages.

tbroyer,
@tbroyer@piaille.fr avatar

@scrwd @macdonst Astro does have named slots: https://docs.astro.build/en/basics/astro-components/#named-slots

aeris, to random French
@aeris@firefish.imirhil.fr avatar

Avec Rust, j’ai l’impression de me retrouver à une certaine époque de NodeJS ou de Go et de Debian…
« Nécessite rust 1.68 minimum ». Debian :

# apt-cache policy rustc            
rustc:
  Installé : 1.63.0+dfsg1-2
  Candidat : 1.63.0+dfsg1-2
 Table de version :
 *** 1.63.0+dfsg1-2 500
        500 http://ftp.fr.debian.org/debian bookworm/main amd64 Packages

Ah ben oui, faut du Debian testing… 😑

tbroyer,
@tbroyer@piaille.fr avatar

@aeris …ou alors aller chercher des paquets fournis par les projets eux-même (ou des tiers de confiance), e.g. https://nodejs.org/en/download/package-manager#debian-and-ubuntu-based-linux-distributions pour Node, https://adoptium.net/installation/linux/ pour Java

…et https://docs.docker.com/engine/install/debian/#install-using-the-repository pour Docker :troll:

(bon pour Rust et autres par contre, aucune idée)

nixCraft, (edited ) to random
@nixCraft@mastodon.social avatar

Poll: Have you ever been up all night coding a project?

tbroyer,
@tbroyer@piaille.fr avatar

@hvangalen @nixCraft Same here, personal projects only.

b0rk, to random
@b0rk@jvns.ca avatar

what are your favourite git config options to set? Right now I only really have git config push.autosetupremote true and git config init.defaultBranch main set in my ~/.gitconfig, curious about what other people set

(diff algorithm patience? a custom diff/merge tool? enable rerere?)

tbroyer,
@tbroyer@piaille.fr avatar

@jakelazaroff @b0rk Note that you no longer need that excludesFile, you can put your patterns in $XDG_CONFIG_HOME/git/ignore without further config: https://git-scm.com/docs/git-config#Documentation/git-config.txt-coreexcludesFile

tbroyer,
@tbroyer@piaille.fr avatar

@b0rk I set pull.ff=only, and wonder why I don't put rebase.autoStash=true and rebase.autoSquash=true as I almost always pass them on the command line.

tbroyer, (edited ) to random
@tbroyer@piaille.fr avatar

w00t! First PR to Web Platform Tests was just merged: https://github.com/web-platform-tests/wpt/pull/44355

Run them live in your browsers: https://wpt.live/html/dom/reflection-forms.html

Now expecting the browser bugs to be fixed as they see their WPT score drop a bit 😁
(in what was part of interop-2023)

b0rk, to random
@b0rk@jvns.ca avatar

what problems do you run into with git's staging area? right now I'm feeling like the staging area is one of the least confusing parts of git (merging, branches, and remotes seem to cause people a lot more problems) but I'm very open to writing about it if there are problems

tbroyer,
@tbroyer@piaille.fr avatar

@b0rk Issues I have with the staging area? I can think of 2:

  • git add -p doesn't work for new files; a workaround is to git add -N it first, then you can use git add -p; and to my knowledge, the reverse is also trye: when a file is added with all its content it's impossible to unstage only some lines (I use git citool/git gui a lot)

  • stashing/unstashing will regularly stage the changes whereas they weren't staged when they were initially stashed

That last sentence leads to me adding a third one: the "stage" and "stash" words are too similar to each other! 🤣

tbroyer,
@tbroyer@piaille.fr avatar

@pcdevil @b0rk I rarely use git stash actually, I often use --autostash when rebasing though (and I rebase very often)

nolan, to random
@nolan@toot.cafe avatar

"Write code for the web" by Manav Rathi https://mrmr.io/apple

This is from an iOS developer, but as an Android developer, I came to basically the same conclusion 10 years ago. The web isn't perfect, but it's a near-universal platform not owned by anybody.

tbroyer, (edited )
@tbroyer@piaille.fr avatar

@starry @nolan Breaking changes on the web? Only thing I can think of are third-party cookie handling, and Google is the one that's late to the party.

tbroyer, to random
@tbroyer@piaille.fr avatar

For those interested, I just published on GitHub a series of tests for reflecting attributes in web components (see https://blog.ltgt.net/web-component-properties/ for the rationale, I'll update it soon following those tests), reusing the same tests as used by browsers for built-in elements.
Tests include (for now) vanilla custom elements and Lit custom elements.

https://github.com/tbroyer/custom-elements-reflection-tests

tbroyer,
@tbroyer@piaille.fr avatar

⬆️
Updated my post following those tests, as some code samples were wrong and I learned a few new things writing the tests:

https://blog.ltgt.net/web-component-properties/

BTW, also added FAST implementations to the test.

5t3ph, (edited ) to random
@5t3ph@front-end.social avatar

Should I start a CSS podcast?

tbroyer, (edited )
@tbroyer@piaille.fr avatar

@5t3ph What's the most appropriate answer for "do as you want, just know I won't listen to it anyway"? (for many reasons: I almost never listen to anything, even conference videos I generally read the subtitles; English is not my native language so it demands too much effort undeciphering various accents and idioms I'm not used to)
I might read full transcripts if you plan to have them though.

aeris, to random French
@aeris@firefish.imirhil.fr avatar

J’aimerais bien publier mon mémoire au Conseil d’État, mais il y a (beaucoup) de données perso dedans que j’aimerais anonymiser.
Que connaissez-vous comme outil de caviardage pour du PDF ? 🤔

tbroyer,
@tbroyer@piaille.fr avatar

@aeris Xournal ?

tbroyer,
@tbroyer@piaille.fr avatar

@aeris Je dois dire que j'ai utilisé que pour aller coller une image (scan de signature) et ajouter quelques textes (remplissage de "formulaire") mais y a l'air d'y avoir plein de features.
Maintenant, qu'il le rende possible (probablement) ne veut pas dire qu'il le rende facile 🤷

nixCraft, to random
@nixCraft@mastodon.social avatar

Why does Python get so much hate? It is literally like a Basic programming language. Easy to learn and guaranteed to get a job because of massive demand.

tbroyer,
@tbroyer@piaille.fr avatar

@nixCraft I think my only (main?) issue with Python is dependency management and that venv thing. Feels so so much like an after-thought.

rauschma, to markdown
@rauschma@fosstodon.org avatar

One aspect of that I love is that you can put even its own syntax in code blocks, simply by making the delimiters longer:

```txt  
Code block  
```

I miss that feature in HTML and JavaScript.

HTML:
<pre>
&lt;div&gt;&lt;/div&gt;
</pre>

JavaScript:
const multiLineTextWithBackticks = `

  • Keyword •function•
  • Keyword •while•
    .trim().replaceAll('•', '')
tbroyer,
@tbroyer@piaille.fr avatar

@rauschma Depends on your markdown implementation though. Here's how your post appears in @phanpy :

jaffathecake, to random
@jaffathecake@mastodon.social avatar

Really sad that the Navigation API isn't being included in interop 2024. This API makes a night-and-day difference to handling navigations. It cannot be polyfilled, and cannot really be used as progressive enhancement. We need it yesterday. https://github.com/web-platform-tests/interop/issues/435#issuecomment-1921896911

View transitions isn't being included either, but I'm less sad about that, because it can be used as progressive enhancement. https://github.com/web-platform-tests/interop/issues/437#issuecomment-1921897450

tbroyer,
@tbroyer@piaille.fr avatar

@jaffathecake @jpzwarte But at a minimum such a "polyfill" would bring the behavior that current SPA have, right? So the actual navigation API would be a lot better, but in the mean time you can "do the same as your traditional SPA but using a more modern API", even if limited to a subset of it, in a limited set of use cases. Or am I missing something?

tbroyer,
@tbroyer@piaille.fr avatar

@jaffathecake @jpzwarte Sure, but with the ergonomics of the navigation API, and actually using the navigation API where possible (again, in the limited use cases where you can "emulate" the navigation API with the history API)

tbroyer,
@tbroyer@piaille.fr avatar

@passle @jaffathecake @jpzwarte "keeping the behavior the same " You'd get a "better" behavior (particularly when loading data in response to a navigation: URL changes when appropriate, you get the browser spinner, etc.)

tbroyer, to random
@tbroyer@piaille.fr avatar

Tell me you don't understand REST and HTTP without saying you don't understand REST and HTTP.

tbroyer,
@tbroyer@piaille.fr avatar

@mw @sergi That second case is covered by If-Match / If-Not-Modified-Since. Custom headers can probably be used too, or then use a POST.

tbroyer,
@tbroyer@piaille.fr avatar

@mw @sergi …which then completely changes the semantics of the request. Doesn't that just confirm they don't understand HTTP then?

tbroyer,
@tbroyer@piaille.fr avatar

@sergi @mw I think you're reading too much into my message. My point is that DELETE /a with, say, a body like foo=bar still says "delete /a"; and DELETE /a?foo=bar has a different meaning.
And if you want to say "delete some data that matches foo=bar" then you'd better send a POST (if that "some data" is accessible at /a?foo=bar, then a DELETE there is ok though).
My point, really, is that if you're discussing this then you don't really understand REST and HTTP: what resources are, etc.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • tacticalgear
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • osvaldo12
  • ngwrru68w68
  • GTA5RPClips
  • provamag3
  • InstantRegret
  • everett
  • Durango
  • cisconetworking
  • khanakhh
  • ethstaker
  • tester
  • anitta
  • Leos
  • normalnudes
  • modclub
  • megavids
  • lostlight
  • All magazines
    •