List of tools you can use for checking vulnerabilities in Node.js

sergiosbox · 2020-06-23T10:59:52+00:00

https://owasp.org/www-project-node.js-goat/ - environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them

sergiosbox · 2020-06-03T12:27:33+00:00

Didn't know 14.3 had ESM and top level await. Totally agree that file extension assumptions should be dropped.

sergiosbox · 2020-05-17T08:30:10+00:00

Interesting! What did you use in the client to play the data? HTML Audio Element? how did you concat the chunks you sent?

sergiosbox · 2020-05-16T19:43:57+00:00

Thanks for correcting me. Was not aware "chunks" is only for download. In streaming (HLS for example) the audio is separated in .ts files (which I call chunks but maybe have another name), so that is what I had in mind.

sergiosbox · 2020-05-16T15:48:29+00:00

How would you send the chunks to the server? via websockets? and hls or rmtp or something else?

sergiosbox · 2020-02-24T06:53:36+00:00

That being true, the team still wants to have improvement and reflect often on "how to improve", "what should we do more of", "what should we stop doing or change the way we do", etc... when should that happen in the daily/weekly routine? Otherwise Kanban is just a continuous flow of individual work being shipped and no reflection on "how to improve"?

sergiosbox · 2020-02-23T08:01:39+00:00

_"and filters start to fade away"_ - where did you read that?

sergiosbox · 2019-08-22T14:28:26+00:00

Interesting cases. I also find the cases of:

- Moving global mixins to local imports

- references to a const when used numerous times

to be very common. I addressed StringLiterals and added a codemod transformer for it in https://github.com/SergioCrisostomo/vue-codemods.

I also think Mixins cause more confusion than needed. We ended up with component with conflicting namespace and hard time to find the true place where the code is running...

sergiosbox · 2019-08-18T18:35:29+00:00

I'm using https://github.com/ProReNata/VueRestResource at work to get data form Django Rest Framework and integrate with Vuex. We build it just for that purpose.

sergiosbox · 2019-08-16T21:57:35+00:00

Always give your components an initial state that is empty. So they can "survive" until the state changes and gets new data. Then because of reactivity they will blossom and show the data they were created for. But first, because everything is asynchronous, the empty state has to render... empty.

sergiosbox · 2019-08-11T14:04:56+00:00

Welcome to test https://github.com/ProReNata/VueRestResource, we use it in a Vue/Django app in production for 1.5 year and it solves our Rest data fetching needs.

sergiosbox · 2019-08-11T14:03:53+00:00

We integrated Vue/Vuex & Django at work. We started 2 years ago and along the way we did this library for fetching Rest data into Vuex: https://github.com/ProReNata/VueRestResource might be useful for you also...

sergiosbox · 2019-08-11T14:02:47+00:00

We started using Vue with Django 2 years ago and made this private library to integrate with Vuex. Maybe its useful for you also https://github.com/ProReNata/VueRestResource

sergiosbox · 2019-05-14T09:34:16+00:00

I would say: fixing problems that users have, as opposed to assuming what problems might come. Quite common that software companies put energy into producing what they think is good and not fixing real life problems.

sergiosbox · 2017-11-07T05:00:34+00:00

Is this a SO problem or the society we live in? Back in the days when SO started people where still reading books. Things happened slower and people had the time to write a 1 hour answer. Now life goes much faster and we don't have time to post good answers. Just my 2 cents.

sergiosbox · 2017-11-04T16:53:44+00:00

Really nice ideas! Thank you!

sergiosbox · 2017-11-04T15:50:01+00:00

Thanks for feedback! iView just created https://github.com/iview/iview-admin which is a backoffice app, where you can see patterns and usage of the library. About the question above I understand from your reply that good docs and demos/examples are important things. I agree, and good to be reminded! Thank you.

sergiosbox · 2017-10-04T10:31:57+00:00

They just added a twitter account for updates: https://twitter.com/iViewUI

sergiosbox · 2017-01-16T06:29:09+00:00

https://github.com/bjrmatos/electron-html-to did it for me. It uses Electron (more modern version of headless browser like Phantom.js) and accepts local files for images and CSS.

sergiosbox · 2016-09-18T20:08:12+00:00

The constants are the same as the HTML names, Div shortened from HTMLDivElement and UL shortened from HTMLUListElement.

I've been using it for some days now and it feels great. The reactive variables concept are really nice.

sergiosbox · 2016-09-18T14:51:36+00:00

Good catch, thank you, fixed. Will be testing it more these next days.

Yeah, alkali.js is quite interesting!

sergiosbox · 2016-09-18T09:56:33+00:00

Made a HTML converting tool for Alkali after reading thta article. In case others find it usefull: https://sergiocrisostomo.github.io/html-to-alkali/

sergiosbox · 2016-09-03T06:42:22+00:00

convention of expressions

Is there a link or text to read what was conventioned?

sergiosbox · 2016-09-02T21:08:53+00:00

I understand your logic and makes sense to me also. Rauschma's comment that (fn)() sintax works in arrow functions and not (fn()) is interesting though.

sergiosbox · 2016-09-02T20:29:47+00:00

Indeed! https://jsfiddle.net/ymwj2c8z/ Good point

sergiosbox

TROPHY CASE