home.social

#polyfill — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #polyfill, aggregated by home.social.

  1. So, I'm thinking; what if I build polyfill.io, but on the Blockchain! Hey come back..

    Hear me out; #fleekfunctions are immutable, and transparent. So long as the #fleeknetwork nodes can be trusted to execute the code properly (I presume there are cryptographic guarantees of output validity) then it could be safer from supply chain attacks.

    #webDev #polyfillio #polyfill #supplyChain #hacking #web3 #blockchain #fleek #javaScript

  2. Another day, another attack to software dependencies:

    arstechnica.com/security/2024/

    This is different from the xz story, but the core idea is the same: take ownership of a popular project, and sneakily replace it with malicious code.

    #securiy #supplychain #polyfill

  3. @patric and #Wolfi apparently uses #Cosign Wooo! That's perfect, because I am actually working on a type of container registry :)

    It's still a glmmer in the postmans eye, but it will be spitting out containers - and signing is so important nowadays, especially when you read about security breaches like with #Polyfill

    Shout outs to #Cloudflare for just redirecting all that traffic to a safe #CDN. Credit where credit is due.

  4. Related to @jeni's post on #Drupal Quicklink (drupal.community/@jeni/1126834), there's also a #Webform risk, explained here:
    drupal.org/project/webform/iss

    You're not vulnerable just by having Webform, you have to have enabled the Choices sub module both at system and field level.

    HTH! #infosec #polyfill #polyfillio

  5. Just made a conclusion that avoiding #CSSinJS makes sense only for reset stylesheet, and even then you'd want to inject it via #JS Import Assert syntax (es-module-shims #polyfill). Embrace single-file #WebComponents, #KISS!