makandra dev
github.com

If you render markdown from user input, an attacker might be able to use this to inject javascript code into...

Speaker today is Henning Koch, Head of Development at makandra. This talk will be in German with English slides.

github.com

The linked GitHub repository is a bit like our "dev" cards deck, but groomed from a single person (Josh Branchaud...

Chrome allows you to throttle the Network and the CPU. Both settings are useful to measure the performance of you...

Embedding videos on a website is very easy, add a tag to your source code and it just works...

If you want to make your Rails application be capable of sending SMTP emails, check out the action mailer configuration...

This is a bookmarklet you can add to Chrome or Firefox which will allow you to create a story in...

When text renders differently in Firefox and Chrome, it may be caused by a font alias that both browsers handle...

Projects with more than one developer should always consider to enforce code review even for small changes to improves the...

This collection contains some useful design resources for developers. Many of them were mentioned in the Refactoring UI tutorials.

When using Chrome for Selenium tests, the chromedriver binary will be used to control Chrome. To debug problems that stem...

When you update your ChromeDriver to version 75 or beyond, you might get w3c errors in your tests.

Download buttons can be difficult to test, especially with Selenium. Depending on browser, user settings and response headers, one of...

We're always striving towards keeping our website's JavaScript as small as possible. If you're using webpack(er...

makandra dev

TL;DR Most web applications do not require action on this. SameSite=None (old browser default) will continue to work...

makandra Curriculum

When your code does not behave as expected, you can use a debugger statement ("breakpoint") at any point in your...

The rendered font often depends on the local font your system provides, therefore you often find a rule like below...

When you created a project on the Google API Console which is not being used, you may receive an e...

Accessing pseudo elements via JavaScript or jQuery is often painful/impossible. However, accessing their styles is fairly simple. Using getComputedStyle

developers.google.com

Mobile Chrome and Safari support the "web share API" which allow you to use the native share functionality of an...

Geordi uses parallel_tests if available for running the test suite. To debug an application it is very unhandy to...

TL;DR: All modern browsers default to using the element as the main document viewport. In CSS, prefer to set...

makandra dev

Cross-Site Request Forgery (CSRF) is an attack pattern for websites. A CSRF attack is usually relevant in a...

A JavaScript error in an E2E test with Selenium will not cause your test to fail. This may cause you...