Tootfinder

HTML over WebSockets: real-time SPAs with barely any JavaScript
Building a SPA (Single-page Application) is a complex puzzle: a JavaScript framework that draws the view, an API serving JSON, and 2 independent codebases forced to understand each other through contracts. It is an accepted, professionalized scenario. […]
— by @…
🧑‍💻

🚀 #JavaScript discovery extracts endpoints, URLs and emails and builds target-specific wordlists; captured #WebSocket connections can be inspected and frames injected
📊 Findings attach to the exchange that proves them; projects export sanitized by default, with

Lately I've noticed that Phanpy really makes chromium burn a lot of CPU. That could be chromium's fault (don't get me started..), but I suspect it's because Phanpy is using (P)React, which is a whole lot of javascript. I've gone back to Elk for the time being, and it's night-and-day. Unfortunately Elk is definitely rougher around the edges, but it also uses much less CPU on my laptop.

📦 Beyond native code: #JavaScript and #Electron apps (modules, IPC, source maps), .NET assemblies, #Android APKs via JADX, live devices via adb, WASM, EVM bytecode, firmware, HAR captures a…

🥳 Just published JSDB version 8.0.0
JSDB is a zero-dependency, transparent, in-memory, streaming write-on-update JavaScript database for the Small Web that persists to a JavaScript transaction log.
https://codeberg.org/small-tech/jsdb
⁃ Breaking: Minimum Node version is now 24 (LTS)

jsdb
A zero-dependency, transparent, in-memory, streaming write-on-update JavaScript database for the Small Web that persists to a JavaScript transaction log.

from my link log —
The Go language for data science.
https://github.com/qiniu/goplus
saved 2020-06-19 https://dotat.at/:/F528G.html

@… please use this JavaScript CAPTCHA to prove that you are a human that disables JavaScript

JEHOVA! Er hat eine F12-Taste! Steinigt ihn!

Use cookies in shiny apps: #rstats #shiny

Lol at Claude put this in my page Javascript
const $ = (id) => document.getElementById(id);
jQuery ain't never gonna die

from my link log —
Enumerating and analyzing 40 non-V8 JavaScript implementations.
https://notes.eatonphil.com/javascript-implementations.html
saved 2021-09-22

I've been wondering, what if we think about LLMs as a solution rather than a problem?
like, there are problems with LLMs, but consumers are paying for them because they genuinely solve problems. Maybe it's better to focus on the problems they're solving?
The kinds of problems I'm thinking about:
- lack of documentation
- lack of support network
- lack of time, e.g. due to attention economy
- too much choice (e.g. javascript framework choice par…

🥳 Two releases: Auto Encrypt Localhost 11.3.0 and @small-tech/https 6.2.0
• Adds remove method you can use to uninstall a local Certificate Authority (CA) from the system trust store, Firefox policy files, etc. Use this to clean up when uninstalling your apps that depend on Auto Encrypt Localhost and/or @small-tech/https.
Links:
• h…

auto-encrypt-localhost
Automatically provisions and installs locally-trusted TLS certificates for Node.js https servers in 100% JavaScript (without any native dependencies like mkcert and certutil).

If you're using #TypeScript or #JavaScript or #NPM, where do people hang out and talk about projects/issues these days (other than on Reddit, Discord), i.e. where are the communities/exchanges, since …

This is what cve.org is showing when I don't allow JavaScript execution for a third party domain (mitre.org) in my LibreWolf browser: "Service is currently unavailable." 🤦‍♂️
I guess the #security community should do better than that.
And yes, when JavaScript is disabled for cve.org, I do get a helpful message that informs me that the web site can't work without JavaS…

The thing I hate about working in the #JavaScript space is bit-rot. My #ClojureScript swinging needle meter demo, written in 2017, still works, but I can no longer compile it from source.
Probably this won't take too long to fix, but it is work which should not have to be done.
…

From an email I got today. It’s spam but also hilarious.
“Your work at RasterWeb, especially how you weave C and JavaScript together, feels like a masterclass in balancing performance with interactivity.”

Your JSON Is Lying to You
🧑‍💻 #json

Your JSON Is Lying to You
JSON looks like a faithful representation of JavaScript data, but JSON.stringify and JSON.parse can silently alter or discard information at system boundaries.

Rust is new javascript now
not the type of success I expected

@… well wait I was told that people didn’t disable javascript

🥳 Auto Encrypt Localhost version 11.0.0 released
This is mostly a bug fix, code quality, and modernisation release.
Auto Encrypt Localhost automatically provisions and installs locally-trusted TLS certificates for Node.js https servers in 100% JavaScript (without any native dependencies like mkcert and certutil).
https://

auto-encrypt-localhost
Automatically provisions and installs locally-trusted TLS certificates for Node.js https servers in 100% JavaScript (without any native dependencies like mkcert and certutil).

Missed my talk on #DDEV & #FrankenPHP in Lille last week? 🤔
No worries! I wanted to follow up on a FrankenPHP feature that I think deserves more attention: Hot Reload.
This brings JavaScript's Hot Module Replacement (HMR) to PHP: Change a Twig template or PHP class, save the file, and s…

Hot reload with FrankenPHP | bitExpert
Learn how to streamline your PHP development workflow with FrankenPHP's hot reload feature, which automatically refreshes your frontend when files change, simplifying development and improving productivity.

The ternary operator is all fun and games until you end up with a branch coverage drop without a line number for the culprit (because one of the branches is covered).
#dev #programming #JavaScript…

well, seems like they’re using JavaScript to load their favicon, for some reason: https://www.adobe.com/libs/utils/favicon.js

from my link log —
dc.js: dimensional charting in JavaScript.
http://dc-js.github.io/dc.js/
saved 2019-09-06 https://dotat.at/:/ZBP4F.html

Little tip when linking to source code in your docs, etc.
You can link directly to lines using anchors if the web view of your source control system supports it. e.g., for Codeberg:
https://codeberg.org/small-tech/jsdb/src/branch/main/lib/QuerySanitiser.…

jsdb/lib/QuerySanitiser.js at main
jsdb - A zero-dependency, transparent, in-memory, streaming write-on-update JavaScript database for the Small Web that persists to a JavaScript transaction log.

Hopefully coding will become a lot easier post-AI, because all those corporate 'open source' frameworks will become even more unusable, and straightforward minimal low/no dependency handmade code the norm.
I still don't know what all these javascript build and deployment tools are really for and maybe I won't have to

from my link log —
Fixing memory leaks in JavaScript in a web browser.
https://nolanlawson.com/2020/02/19/fixing-memory-leaks-in-web-applications/
saved 2020-02-21

Fixing memory leaks in web applications
Update: I’ve written a tool to automate many of the steps described in this post. Part of the bargain we struck when we switched from building server-rendered websites to client-rendered SPAs…

Hey folks, can you help me out with a little something: trying to come up with a good number of files limit for a file scan (for Kitten so you don’t hit heap memory limits if you run it from the wrong directory by mistake) and I’d love some statistics from real JavaScript/TypeScript Node.js projects of the number of files in them (excluding .git and node_modules).
Would you be kind enough to run the following command in Terminal in your largest projects and let me know what number your…

I mean, this is fair and accurate for all languages mentioned...
#Programming #PHP #CPP #Javascript

🔧 Ships as a language server (harper-ls), a JavaScript library, a Rust crate, browser extensions and editor plugins: VS Code, Neovim, Zed, Obsidian, WordPress block editor, Chrome, Firefox and a macOS desktop app that works in every text field system-wide.

I've always loved JavaScript, and was never too fond of TypeScript. I do appreciate it, but at the same time, it's so damn complicated.
I'm so glad that @… made strong types a first-level concept and things are usually simple and clear (neglecting macros here).

The software in question is Arbiter Sports (arbitersports.com).
The headliner among the •numerous• software flaws I encountered in this single registration process: the site fails form validation when making subsequent edits — or no edits, just resaving unchanged! — to a form that the system •had already accepted•.
The only user-visible message is “Required Information Missing.” (There was no required info missing; again, it already passed validation.) The problem, visible only in the Javascript console, was that the site was rejecting non-alphanumeric characters in a phone number it had pulled from its own database.
The fix was to make some keystrokes in the offending field to force the site’s Javascript to re-sanitize it for the back end.
2/3

When your RSS feed can only be fetched by clients that understand and execute javascript you are doing it wrong.
I'm looking at you @…
`curl #rss #cloudflare #broken

from my link log —
Lezer: a parser system in JavaScript.
https://lezer.codemirror.net/
saved 2020-10-21 https://dotat.at/:/VL4WJ.html

Lezer
Incremental parsing system

⚡ Code base instead of CLI base: browser capabilities are exposed as JavaScript functions the agent calls directly, composing a multi-step task into a single snippet instead of a "call, look, call again" loop
🚀 Benchmarked against Vercel's agent-browser on four complex automation tasks: up to 2.5× faster with substantially fewer tokens and far fewer tool calls

Forgot about my Yotta JavaScript framework
https://github.com/madrobby/yotta

It's such crappy software, after disabling some javascript triggers I managed to submit a password containing spaces.
The problem? Well the server software breaks the password on the first space. So "This is a password" becomes "This".
Very fucking classy TP-Link, also they have all kinds of language options, yet once in France, you will get all pages in French. No matter how many times you tell them you prefer English.

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.
Source code: #misp #cti #threatintelligence #opensource #threatactor #cybersecurity

Threat-Actor explorer v1.1.0 released with many improvements and upgrade to the latest Pivotick library Latest
A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.
#misp #threatactor #threatintelligence #cybersecurity #mispgalaxy #cti #opensource #cybersecurity