Search
Posts
Hugo Dark Mode Code Blocks Unreadable: Fix noClasses
Hugo's Chroma highlighter writes inline colours that override dark mode code boxes. Set noClasses = false, generate per-theme stylesheets, test 4.5:1 contrast.
ReadErasure Requests: Model Provider Cleanup From Reservations
Derive a model provider cleanup set from reservations and confirmed calls. An erasure request that skips a reserved call may leave personal data at the vendor.
ReadRate Limit a Django Signup Form Without Refusing Anyone
Rate-limit a Django signup form by deferring verification emails instead of refusing applicants. Submissions are stored; the mail waits for an open hour.
ReadDependabot Groups for Up-to-Date Branch Protection
Dependabot groups turn one PR per dependency into one per ecosystem. Why up-to-date branch protection makes single PRs a serial rebase queue.
ReadReferrer-Policy same-origin: Django CSRF 403 Origin null
Referrer-Policy no-referrer makes browsers send Origin: null on same-site form posts, so Django CSRF returns 403. Use same-origin and drop Referer from logs.
ReadDiscord Webhook 204 No Content: Confirm with ?wait=true
Add ?wait=true to a Discord webhook POST to get the created message ID back. Mark an RSS item seen only when every copy is confirmed.
Readgo tool cover -func: Join Coverage by Function, Not by File
Join go tool cover -func output to complexity by file, line and function. Keyed by file, each function inherits the last one's coverage and can pass CRAP.
ReadA Database Restore Does Not Undo Sent Email or Envelopes
An AST-scanned registry makes a restore effect journal's coverage testable. Building it exposed a path that would mail a signer a second contract.
ReadMySQL Executable Comments Bypassed Our SQL Safety Gate
MySQL and MariaDB run executable comments as code, so a SQL guard that strips comments before classifying can be bypassed by those comments. Three blind spots.
ReadSSRF Egress Proxy: Deny Your Own Public Production Hosts
Deny your production hosts by name, resolved address and connected peer, so an SSRF egress proxy refuses them even though they have public addresses.
Read