Issue #74 · August 6, 2018

Detecting the use of "curl | bash"

“Computers are good at following instructions, but not at reading your mind”

Best 7 links of week #31, 2018

Detecting the use of "curl | bash"

Detecting the use of "curl | bash"

Executing a curl from a URL and piping the result into bash is a very common yet inherently insecure practice. To discourage the use of this practice you can detect when this is happening from the server side and return an alternative message to stop the user from doing this.

Articles

Why Discord is Sticking with React Native

React Native has been at the centre of the mobile development landscape after Airbnb decided to move away from it. Here's an interesting use case of a company that is sticking with React Native and supporting this technology.

7 Basic Design Principles We Forget About

Clarity. Actionable interfaces. Opinionated design. Gather feedback. Use metaphors. Provide context over consistency. Use defensive design. These are 7 design principles that you shouldn't forget while developing your next great project.

The trick to viewport units on mobile

Viewport units have always been controversial and some of that is because of how mobile browsers have made things more complicated by having their own opinions about how to implement them.

Build a state management system with vanilla JavaScript

Managing state is not a new thing in software, but it’s still relatively new for building software in JavaScript. Traditionally, we’d keep state within the DOM itself or even assign it to a global object in the window. Now though, we’re spoiled with choices for libraries and frameworks to help us with this. Libraries like Redux, MobX and Vuex make managing cross-component state almost trivial.

Why the New V8 is so Damn Fast

The entire V8 compiler pipeline was overhauled and shipped with Node.js version 8. This post investigates what speed improvements we can expect as a result.

Logical Styling Based on the Number of Given Elements

Did you know that CSS is Turing complete? Did you know that you can use it to do some pretty serious logical styling? Well you can! You don’t have to set all of your logic-based styling rules in JavaScript, or even have to use JavaScript to set classes you are styling against.

Book of the week

Rails, Angular, Postgres, and Bootstrap: Powerful, Effective, and Efficient Full-Stack Web Development

Rails, Angular, Postgres, and Bootstrap: Powerful, Effective, and Efficient Full-Stack Web Development

by David B. Copeland

As a Rails developer, you care about user experience and performance, but you also want simple and maintainable code. Achieve all that by embracing the full stack of web development, from styling with Bootstrap, building an interactive user interface with AngularJS, to storing data quickly and reliably in PostgreSQL. Take a holistic view of full-stack development to create usable, high-performing applications, and learn to use these technologies effectively in a Ruby on Rails environment.