> Markdown version of [/magazine/390-dev-digest-104-fight-for-your-right-to-3rd-party](https://www.wearedevelopers.com/magazine/390-dev-digest-104-fight-for-your-right-to-3rd-party). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Dev Digest 104 - Fight for your right to 3rd party **By:** [Chris Heilmann](https://www.wearedevelopers.com/@chris-heilmann) **Published:** February 26, 2024 Last Friday's Dev Digest was a spotlight issue covering the problem of Apple's plan to disallow web applications to be added to the homescreen and run as standalone apps. We had an expert round and wrote [about it here](/magazine/389-apple-ios-vs-web-apps-affects-us-all-help-the-owa-to-ensure-you-can-release-apps-for-everyone), too. Other than that, had a lot more in store for you: ## News and Articles In **security news** , probably the biggest one is that the [WordPress Bricks Theme has a security flaw](https://thehackernews.com/2024/02/wordpress-bricks-theme-under-active.html?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) that impacts 25k+ sites. Like it or not, Wordpress is a huge part of the web, and thus makes it a tempting target for attackers. This vulnerability in detail allows execution of PHP, which, depending on the setup of your Wordpress instance, can allow attackers to take over your whole machine. At one time, I had the same on my personal blog and found out by looking at my traffic that I had a blog running in a sub folder that was showing price comparisons! Mastodon is great. I love that it is a superbly open alternative to X and others, but lately it has been a [spammy mess](https://github.com/mastodon/mastodon/discussions/29267?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E), and it [shows issues of the fediverse](https://techcrunch.com/2024/02/20/spam-attack-on-twitter-x-rival-mastodon-highlights-fediverse-vulnerabilities/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E). The good news is that as things are open, they might be easier to fix. The bad news is that it needs every Mastodon instance admin to apply the same safeguards. What do you think? Is Mastodon the new X for you? A Nginx [core developer quits in security dispute](https://arstechnica.com/information-technology/2024/02/nginx-key-developer-starts-a-freenginx-fork-after-dispute-with-parent-firm/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E), and starts a “freenginx” fork. In **platform news** a notable thing is that CSS might soon have [functions and mixins](https://github.com/w3c/csswg-drafts/issues/9350?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E), making preprocessors history. I love to see how CSS evolves, especially as it is a journey from specifics (make this blue and 200px wide) to generics (make this a blue that has enough contrast with the background, as wide as possible, but not wider than 40 characters and with a margin on the right or left, depending on the reading direction). Functions and mixins have been part of Sass or others for quite a while, and could make it easier for non-CSS developers to embrace the language. It also can mean we can ditch conversion steps and create fewer CSS. Right now with preprocessors, we often create a ton of CSS and then use another, performance-oriented tool, to cut down to the bare minimum again Often people cite the reason that CSS on its own doesn't give them all they need. This is now over, I suppose. The Microsoft Edge team proposes [EditContext](https://blogs.windows.com/msedgedev/2024/02/13/custom-web-editing-experiences-with-editcontext/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E), replacing contentEditable, which always felt good, but was a mess when it comes to error handling. Low-code and No-code solutions do need good WYSIWYG editing, and many editors are a mess. So adding this to the platform sounds like an excellent idea. In terms of **thought pieces and articles** we had Jack Lindamond writing on [infrastructure decisions he endorses or regrets](https://cep.dev/posts/every-infrastructure-decision-i-endorse-or-regret-after-4-years-running-infrastructure-at-a-startup/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) and a discussion about Tailwind, it's[marketing and misinformation engine](https://nuejs.org/blog/tailwind-misinformation-engine/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) and a 1:1 comparison of a site built with [Tailwind vs. Semantic CSS](https://nuejs.org/blog/tailwind-vs-semantic-css/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E). ## Code and Tools Our very own **Daniel Cranney** explains the [Next.js App Router](/magazine/387-next-js-app-router-explained) by building a "[WoofPix](https://wad-app-router-basics.netlify.app/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E)" app! If you wonder how to use it, this is a good start. And it uses the absolutely fabulous [Dog API](https://dog.ceo/dog-api/) which also contains photos of some of our dogs! Search boxes need to provide people with results and not be frustrating. That's why "fuzzy searches" are a great thing. Allow your users to make typos, write only partial results and the like.[Frontend Fuzzy Search](https://github.com/m31coding/fuzzy-search?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) allows you to build forgiving search forms. Browser automation has been a staple of testing and development for quite a while. [Autotab](https://www.autotab.com/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) allows you do do things in the browser and let AI learn to repeat it by automating the process. If you are familiar with Chrome DevTools' Recorder feature, this is that one on steroids. ## Videos and talks In the video section, we have a few to choose from: - **Scott Chacon** : [So You Think You Know Git? (45m)](https://www.youtube.com/watch?v=aolI_Rz0ZqY&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) - FOSDEM 2024 - **Davide Imola** - [Securing secrets in the GitOps Era (1h)](/videos/852-securing-secrets-in-the-gitops-era) - **Lucien Immink** - [Project Fugu: Extending the web (1h)](/videos/832-project-fugu-extending-the-web) [‍](https://www.wearedevelopers.com/en/videos?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) ## Work and Jobs [CodeRev](https://coderev.app/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) is an interesting idea: conduct job interviews doing code reviews rather than demo code. This, to me, is much closer to what you will do in the real world. We debug/review a lot more than we code from scratch. That said, research shows that [coding interviews are effective](https://www.pcloadletter.dev/blog/coding-interviews/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E), even though they feel academic at times. More insights come in [falsehoods Junior Devs believe about becoming Senior](https://vadimkravcenko.com/shorts/falsehoods-junior-developers-believe-about-becoming-senior/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E). and I can vouch that many are exactly that, _!true_. Many companies think AI can replace both their employees and real users, but it turns out that [AI user research is not “better than nothing"](https://uxdesign.cc/no-ai-user-research-is-not-better-than-nothing-its-much-worse-5add678ab9e7?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) but actually worse. Kind of when you do personas and don't think them through - at all. Even worse is that [AI hiring tools may be filtering out the best job applicants](https://www.bbc.com/worklife/article/20240214-ai-recruiting-hiring-software-bias-discrimination?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E). ## Procrastination Corner / Wonderful Weird Web In the time wasting section we have a fun way to generate passwords, a very simple game I wrote 12 years ago and an impressive 3D game full of atmosphere. - Making generating random passwords fun by [catching chars in a basket](https://passwordbasket.com/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E). - [Can you scroll](https://codepo8.github.io/canyouscroll/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) - a game where you need to scroll the right amount of pixels - [The Cursed Library](https://cursed.epic.net/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) is a very atmospheric and impressive web game[.](https://cursed.epic.net/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_BZD7UJ4MWQTcA974bOI4phivp9e500kJOo022xCpX1ZqFLuUBNpBR_MTtBaJ8G_yNEd8E) And that's that! See you next Friday in your inbox or the following Monday here! ## Related Articles - [Dev Digest 113 - Debugging above the cloud](https://www.wearedevelopers.com/magazine/422-dev-digest-113-debugging-above-the-cloud) - [Dev Digest 123 - Easy as A, B, C1](https://www.wearedevelopers.com/magazine/459-dev-digest-123-easy-as-a-b-c1) - [Dev Digest 106 - DHH in HD](https://www.wearedevelopers.com/magazine/394-dev-digest-106-dhh-in-hd) - [Dev Digest 125 - Duck and Cover](https://www.wearedevelopers.com/magazine/462-dev-digest-125-duck-and-cover) ## Related Videos - [Dev Digest End of Year Recap](https://www.wearedevelopers.com/videos/1284-dev-digest-end-of-year-recap) - [WeAreDevelopers LIVE - CSS or BS?](https://www.wearedevelopers.com/videos/1850-wearedevelopers-live-css-or-bs) - [New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw](https://www.wearedevelopers.com/videos/1299-new-browser-apis-end-of-react-create-app-smuggling-data-in-emoji-and-more-with-rowdy-rabouw) - [Using all the HTML, Running State of the Browser and "Modern" is Rubbish](https://www.wearedevelopers.com/videos/1291-using-all-the-html-running-state-of-the-browser-and-modern-is-rubbish) ## Related Jobs - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/679408-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/683045-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/356601-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/646086-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/639235-remote-senior-full-stack-engineer) at **Edge Impulse** - [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/644637-remote-senior-full-stack-engineer) at **Edge Impulse**