This security.txt looks like a good idea.
Category Archives: Web
“REST” interfaces
I just wanted to get something that I’ve thought for many years on record, because I don’t think I’ve ever had the chance to discuss it much before, but I believe JSON web services (“REST APIs”) and web applications should deal only in two HTTP verbs, being: GET and POST. You use GET for queries and you use POST for submissions. All POST operations go through business logic for particular services and CRUDing URLs is a supremely bad idea, in my opinion. Just wanted to get that on record. Thanks. p.s for web applications you should 3xx on success, not 2xx on success; what you do for JSON web services is up to you, but for those 2xx is probably fine.
Introducing State Partitioning
This looks like a good idea: Introducing State Partitioning.
Practical Color Theory for People Who Code
Had a quick read of Practical Color Theory for People Who Code.
Best practices for REST API design
Over on the StackOverflow blog: Best practices for REST API design. Some of it is good but I disagree with a bunch of things. I made some notes:
* Use singular https://www.example.com/comment/list Not: https://www.example.com/comments * Use multidimensional selectors, not path/hierarchical selectors: https://www.example.com/comment/list?artist=nirvana&album=nevermind Not: https://www.example.com/album/nirvana/nevermind/comments * Use noun/verb format: https://www.example.com/comment/list https://www.example.com/comment/register https://www.example.com/comment/edit/54688 https://www.example.com/comment/view/54688 https://www.example.com/comment/reply/54688 * The [ noun, verb ] pairs map to Facilities for implementation: [ comment, list ] => CommentLister [ comment, edit ] => CommentEditor [ comment, view ] => CommentViewer Facilities have submit/render functionality and round-trip view state. * HTTP success 30x's not 2xx's. * Include a 'submission ID' on <form> elements for idempotent operations * GET and POST only, don't CRUD URLs, rather invoke business processes
The Complete CSS Grid Tutorial
The Complete CSS Grid Tutorial. Say no more.
OWASP Cheat Sheet Series
Oh wow, this is great: OWASP Cheat Sheet Series.
Caddy
Heard about Caddy today, looks kinda cool.
github1s.com
So there’s this new domain github1s.com where you can load the web version of VS Code and open a github project all in one go, e.g.: https://github1s.com/jj5/apache-formula/.
NES.css
lol, this is great: NES.css