@tbroyer@piaille.fr avatar

tbroyer

@tbroyer@piaille.fr

Web development (frontend, Web APIs), Web app security, build tools, Java, Kotlin, Gradle, etc.

This profile is from a federated server and may be incomplete. Browse more on the original instance.

zachleat, (edited ) to random
@zachleat@zachleat.com avatar

curious what percentage of y’all:

tbroyer,
@tbroyer@piaille.fr avatar

@zachleat Did use one to have more grip, but it was a bit too big. Removed it a few weeks ago and I don't think I'll get back (well, except it allows me to also attach an accessory… which I only use once in a while… (Xiaomi photography kit))

tanepiper, to random
@tanepiper@tane.codes avatar

Should this even be optional? 🤔

tbroyer,
@tbroyer@piaille.fr avatar

@tanepiper AFAIK the most critical level is not optional, you can only disable lower levels (and given how irresponsibly the Paris prefecture abused it to advertize for the olympic games' opening ceremony pass, I bet may parisians disabled those lower levels already).

westbrook, to webdev
@westbrook@mastodon.social avatar

#vite would be such a better tool if it wasn't doing some non-platform thing with platform primitives at every turn. Or at least, could it have a "vite, but for people who actually like the web" configuration option?

🤦‍♂️

#webdev

tbroyer,
@tbroyer@piaille.fr avatar

@westbrook I don't use vite but know teams at work who do so I'm curious. Could you name a few of those things it does?

tbroyer,
@tbroyer@piaille.fr avatar

@Lukew @westbrook Ah yes, I do remember that in 2021 the french website https://vitemadose.covidtracker.fr (to easily book covid vaccination appointments) had (and probably still has) a similar issue: the CSS ended up duplicated between the main page and the shadow dom. This was due to import styles from "style.scss" both injecting the styles in the HTML and returning them as string (so they could be used as unsafeCss with Lit).
I did report this to Vite at the time and indeed the answer was to use ?inline (might have been added specifically in response to that issue): https://github.com/vitejs/vite/issues/3246
That was 3 years ago though, I'd have hoped it would have changed…

patrickbrosset, to CSS
@patrickbrosset@mas.to avatar

Have you used CSS Subgrid?

Looking at the comments that people left about it in the State of CSS survey 2023, I see mostly negative comments. 3 broad themes:

  1. Lack of cross-browser support.
    This is no longer a problem! Subgrid is implemented in all engine as of Chrome/Edge 117.

  2. Complexity/lack of good docs.
    Do you feel this too?

  3. Lack of actual use cases for it.

tbroyer,
@tbroyer@piaille.fr avatar

@tomayac @patrickbrosset We've been using subgrid at work in an internal knowledgebase site since before it came to Chrome. It goes like this:

<body>  
 <header>  
 <div>site title  
 <div>theme toggle  
 <div>  
 <div>search  
 <div>site version  
 <nav>main menu  
 <main>  
 <h1>page title  
 <div>main content  
 <div>author, date, tags, outline  
 <footer>  
 <div>left  
 <div>right

and we want to render in 1, 2 or 3 columns. We could remove the <header>, <div>, <main> and <footer> grouping level and just use grid, but using subgrid seems like a better fit here.

bagder, (edited ) to windows
@bagder@mastodon.social avatar

users running stupid scanners now contact us for support regarding CVE-2023-46218 which the scanners say affects 8.4.0 shipped by Microsoft.

It would, if their version was built to use , a prereq for this CVE, which does not.

Security scanners. A snake oil business.

https://curl.se/docs/CVE-2023-46218.html

tbroyer,
@tbroyer@piaille.fr avatar

@bagder The problem is not the tools themselves (not entirely at least because they have many shortcomings, like not accounting for Debian/Ubuntu fixes backports) but how people (don't) analyze the results.
We do use vulnerability scanners (sending SBOMs to Dependency-Track) but this clearly requires work to analyze the results and determine if you're actually vulnerable (false positive, non-exploitable vuln, only if configured in some specific way, etc.)
Contacting project maintainers for assistance without even some prior analysis is just plain wrong I 💯 agree!

nixCraft, to linux
@nixCraft@mastodon.social avatar

What should the fandom be called? 🤔

tbroyer,
@tbroyer@piaille.fr avatar

@fmuc @nixCraft Nah, that's for frontend web developers fan of web components: https://developer.mozilla.org/en-US/docs/Web/API/Web_components/Using_shadow_DOM

mayank, to random
@mayank@front-end.social avatar

📝 new blog post: "web components" considered harmful

https://www.mayank.co/blog/web-components-considered-harmful

tbroyer,
@tbroyer@piaille.fr avatar

@mayank I have another one for you: are "non-defined custom elements" really custom elements? Or more "unknown elements that happen to have a hyphen in their name"? (because if you only use them to match them in a CSS selector then you could use any name, even without an hyphen)

tbroyer,
@tbroyer@piaille.fr avatar

@mayank Oh sure, but due to https://html.spec.whatwg.org/multipage/syntax.html#syntax-tag-name so would any element with a : or _ in its name (and those are just examples, HTML is very lenient when it comes to parsing tag names: https://html.spec.whatwg.org/multipage/parsing.html#tag-name-state), but those can't be registered in the "custom element registry" so they can't be turned in "defined custom elements" (which everyone just calls "custom elements" I believe)

tbroyer,
@tbroyer@piaille.fr avatar

@mayank Well, technically, dashed names don't create "custom elements" either, but the same kind of "unknown elements".

BTW, I just noticed this in the spec: https://html.spec.whatwg.org/multipage/custom-elements.html#custom-elements-upgrades-examples
> Because element definition can occur at any time, a non-custom element could be created, and then later become a custom element after an appropriate definition is registered. We call this process "upgrading" the element, from a normal element into a custom element.

So a dashed name, per spec, creates a "non-custom element" (aka unknown element), and a "custom element" is one that has been registered.

josh, to microsoft
@josh@vickerson.me avatar

Parts of #Microsoft #Edge get up to 76% faster by dropping #React in favor of Web Components.

React's days may finally be coming to an end 🤞

https://blogs.windows.com/msedgedev/2024/05/28/an-even-faster-microsoft-edge/
————
#WebDev #WebComponents

tbroyer,
@tbroyer@piaille.fr avatar

@josh Well, it's not just react vs web components.

They also rearchitected their code; and as a side effect of moving away from react, they can have code optimized for the most recent Edge when react needs to support many more browser engines and versions (something you definitely want for most web apps).

davatron5000, to random
@davatron5000@mastodon.social avatar

📝 Quick post on a common experience I see when people are test-driving for the first time.

https://daverupert.com/2024/05/cold-turkey-wont-fix-your-javascript-addiction/

tbroyer,
@tbroyer@piaille.fr avatar

@thudfactor @davatron5000 Shameless plug: https://blog.ltgt.net/web-component-libs-benefits/

niclake, to random
@niclake@mastodon.social avatar

Really tempted to give @eleventy a shot, but I've not actually looked at hosting stuff in ages (thanks, GitHub Pages). Any recs for good, affordable hosting platforms for a small site like mine?

tbroyer,
@tbroyer@piaille.fr avatar

@niclake @eleventy Well, GitHub Pages?

https://github.com/tbroyer/blog.ltgt.net/blob/main/.github/workflows/github-pages.yml

nixCraft, (edited ) to linux
@nixCraft@mastodon.social avatar

Poll: Which clone of RHEL (Red Hat Enterprise #Linux) are you using? Please boost for reach. TIA.

tbroyer,
@tbroyer@piaille.fr avatar

@Larvitz @nixCraft Wasn't that exactly the point? That CentOS moved from being a downstream of RHEL to an upstream? (to somehow crowdsource testing 😉)

nixCraft, to mastodon
@nixCraft@mastodon.social avatar

doesn't directly support quoting toot like the bird app. Support (Literally) Quoting Public Toots https://github.com/mastodon/mastodon/issues/22793 is still open. I hope they release support for this. This is killer feature.

tbroyer,
@tbroyer@piaille.fr avatar

@nixCraft Particularly as many fedi clients do support it!

aeris, to random French
@aeris@firefish.imirhil.fr avatar

Quelqu’un saurait comment avec docker compose virer les containers qui sont issus d’un run sans l’option --rm ?
Si on tente un docker compose rm xxx-run-yyy il ne voit rien.
Il y a une option supposée mergée mais… qui n’existe juste plus ?
https://github.com/docker/compose/pull/3178

tbroyer,
@tbroyer@piaille.fr avatar

@aeris docker compose down --remove-orphans?
https://docs.docker.com/reference/cli/docker/compose/down/

tbroyer,
@tbroyer@piaille.fr avatar

Quelle version de Compose ? Parce que "it works on my machine", que le conteneur tourne toujours (detached) ou non.

$ docker compose run keycloak true  
$ docker compose run -d keycloak cat  
$ docker compose ps --all  
&lt;montre les 2 conteneurs, un Up, l'autre Exited&gt;  
$ docker compose down --remove-orphans  
&lt;arrête le conteneur qui tourne, supprime les 2 conteneurs&gt;  
$ docker compose version  
Docker Compose version 2.27.0
melix, to random
@melix@mastodon.xyz avatar

Benefits of constructor injection vs setters: you don't have to rebuild your code 2387619 times to figure out all the dependencies.

tbroyer,
@tbroyer@piaille.fr avatar

@melix …and every single place you need to update (particularly unit tests that don't use DI) whenever dependencies change: code just fails to compile.

argyleink, to CSS
@argyleink@front-end.social avatar

steal this dialog and popover snippet #CSS

  • transitions
  • entry/exit
  • backdrop included

ready for richer design system integration

try on Codepen
https://codepen.io/argyleink/pen/zYbQBOm

tbroyer,
@tbroyer@piaille.fr avatar

@argyleink Your "IN" and "OUT" comments seem off to me.
IMO the starting-style defines the IN, and the non-starting-style and non-open style (in the first rule, the transitioned properties' values) defines the OUT.
The second rule defines the style of the showing popup/dialog (and their backdrop)

timbray, (edited ) to random
@timbray@cosocial.ca avatar

Your reaction to the AI buzz:

tbroyer,
@tbroyer@piaille.fr avatar

@timbray There are so many use cases for AI and all the buzz is around "generic" GenAI. Computers should be about automating boring tasks to leave us the creative ones, not the other way around.
So mostly annoyed by the buzz.

jimniels, to random
@jimniels@mastodon.social avatar

It does feel like there's a fundamental incongruity in that the web (http) is stateless but user expectations for apps/websites are stateful.

But maybe that's a feature not a bug?

"Hit refresh" is the HTTP equivalent for ”Have you tried turning it on and off again?”

tbroyer,
@tbroyer@piaille.fr avatar

@jimniels That HTTP is stateless does not mean "the web" is stateless. It means state leaves on the client side (if only a session cookie), possibly "linked" to data stored (temporarily?) on the server.
This is what makes it "easy" to have load balancers and shared caches.

nixCraft, to random
@nixCraft@mastodon.social avatar

Does anyone outside the RHEL ecosystem use Podman? 🤔 Whenever I suggest Podman, other developers or PMs insist on Docker, which is far more popular and has a stronger brand. Even many RHEL users prefer Docker. Red Hat should have addressed Docker's issues instead of creating another tool that, while good, few people want. And yes docker can run rootless too but it has same limitations as podman rootless like can not bind below 1024 port or create device nodes etc

tbroyer,
@tbroyer@piaille.fr avatar

@nixCraft Due to how we use Docker at work (mostly packaging and distribution, running in dedicated VMs as if we didn't use Docker) we've been contemplating using Podman instead to avoid running too many things as root, but haven't had the time to experiment yet. Main changes are UID/GID mapping, important when you use bind-mounts for persistence (rather than volumes) so you want control on IDs outside the container.
Also clients use Podman or kaniko for building images on gitlab ci/cd, rather than docker-in-docker.
I still default to Docker on my dev station but experiment showed I could probably switch to Podman with no impact.

aeris, to random
@aeris@firefish.imirhil.fr avatar

Y’a des gens, on devrait leur interdire de toucher à un clavier pour coder des trucs… Sérieusement, je tombe sur un projet sympa, j’ouvre le code, j’ai fais une syncope…
J’ai déjà viré tout ça du code…

tbroyer,
@tbroyer@piaille.fr avatar

@winy Sans compter la différence entre critiquer du code et critiquer la personne qui a écrit ce code

aeris, to random French
@aeris@firefish.imirhil.fr avatar

2024, go ne sait toujours pas gérer correctement un truc aussi basique que des dépendances et du build reproductible…

tbroyer,
@tbroyer@piaille.fr avatar

@aeris Ça ressemble à https://github.com/coder/wgtunnel et un git clone suivi de go build ./cmd/tunneld passe sans encombre chez moi, et sauf erreur les go.mod et go.sum sont là pour les dépendances et le build reproductible justement.

$ go version  
go version go1.22.3 linux/amd64
nixCraft, to debian
@nixCraft@mastodon.social avatar

DNSCrypt-proxy is an open-source and free software designed to encrypt DNS traffic, thus protecting it from eavesdropping and manipulation. Let us see how to install DNSCrypt-proxy on a 11/12 with Adblocker or Malware blocker https://www.cyberciti.biz/faq/installing-dnscrypt-proxy-on-debian-linux/

tbroyer,
@tbroyer@piaille.fr avatar

@nixCraft Using it with Pi-Hole for a couple years or so, works like a charm!
Didn't know it has built-in support for blocking, but Pi-Hole at least has a great Web UI with stats et al. 😉

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • ngwrru68w68
  • everett
  • InstantRegret
  • magazineikmin
  • thenastyranch
  • rosin
  • GTA5RPClips
  • Durango
  • Youngstown
  • slotface
  • khanakhh
  • kavyap
  • DreamBathrooms
  • provamag3
  • tacticalgear
  • osvaldo12
  • tester
  • cubers
  • cisconetworking
  • mdbf
  • ethstaker
  • modclub
  • Leos
  • anitta
  • normalnudes
  • megavids
  • lostlight
  • All magazines
    •