This tutorial will walk you through setting up a virtual host for your PHP project. I split this tutorial in two parts — beginning with quick walkthrough, from start to finish in few steps. In the second part, I dive deep on each step of the tutorial to make sure you understand everything that you have done. I have no illusion that most of you will read the second part.
I explain the concepts from a Windows-user perspective (paths, file names). …
Thanks to iframe’s sandbox attribute, it is possible to specify restrictions applied on content displayed inside the iframe. The documentation strongly discourages from using both
allow-same-origin values due to security risks it may introduce. In this blogpost, I am going to explain and demonstrate why.
In Mozilla’s developer documentation on
<iframe>, you can find the following remark related to
allow-same-origin values of the
When the embedded document has the same origin as the embedding page, it is strongly discouraged to use both
allow-same-origin, as that lets the embedded document remove the sandbox…
A little bit of background first though: A Sli.do is an application with both web and mobile interface that is typically used in the meetings with higher volume of attendees. Its purpose is to simplify asking the questions and selecting what questions should be answered. The attendees submit their question on Sli.do and other attendees can see it and vote it up or down. The meeting organizer can then pick the most popular questions and answer them first.
In this not so imaginary scenario, the meeting is announced a couple of days in advance and some highly-emotional, I dare to…
This tutorial will help you set up comfortable environment for developing Tampermonkey user scripts directly in your editor.
If you are reading this post, you probably already know what you are looking for and so I will cut straight to the chase. Editing Tampermonkey scripts in its built-in editor is pure pain and I am going to show you how to set it up with external editor of your choosing.
Before you start, grant Tampermonkey access to local files. It is not possible to make this work without it. Here’s how you do it:
Let me start by introducing the SecurityHeaders.com — an awesomely simple web application that quickly gives you the security overview of HTTP headers your website sends out when visited. On top of that, it also grades the level of security these headers provide, on the A+ to F scale. The application was developed by @Scott Helme, who regularly writes about it on his blog, so be sure to follow him for updates.
When I stumbled upon the application, I was almost immediately convinced that I needed to get that A+ — after all, the security overview on the page provided…