Turbo Frames, a defense-in-depth sanitizer, and teaching Brakeman about it
The editor's first Turbo Frame ate its own Stimulus target on reload, the preview got two sanitization layers, and a Brakeman false positive got documented.
Notes on the software, games, and music coming out of Imperfect Systems.
RSS feedThe editor's first Turbo Frame ate its own Stimulus target on reload, the preview got two sanitization layers, and a Brakeman false positive got documented.
A Hash round trip would reformat every post on first edit. Psych's node API remembers each scalar's quoting style, verified against all 166 live posts first.
Bing flagged this site for weak inbound links. The research meant not trusting search summaries, and discovering four sibling sites need four different answers.
Every error Greenhouse showed users started as a hand-formatted English string in Rust. The fix sends the shape of the problem over the wire, not a sentence.
astro-indexnow is a good package that assumes your CI can commit a cache file back to the repo. Cloudflare Workers Builds is a one-way pipe - so forty dependency-free lines instead.
Extracting 230 strings across nineteen files, a plural syntax the plugin refused, and a clean build with every translation silently undefined.
Astro detects when a coding agent runs it and switches to a JSON logger - which reaches for process.stderr inside a workerd sandbox that has no process at all.
Bing said the site's meta descriptions were too short. Almost every page had a good one - except the homepage and the blog index, the two pages everybody actually lands on.
The language switcher worked, but six homepage components still rendered English literals, and a dev server bug added a twenty-minute detour.
Four spots where Greenhouse's spec and its code disagreed - none of them bugs, all of them decisions I made in code and never wrote down.
Page 2 of 19