CSP without inline scripts: what to switch off in Nuxt
Why a strict script-src self policy breaks static Nuxt, which three steps made the site compatible, and the build check that keeps it so.
RSS
Notes RSS feed
This is an RSS feed. Add its address to a feed reader (Feedly, Inoreader, NetNewsWire and others) and new notes will arrive there on their own.
Paste this address into the "add subscription" field of your reader.
https://ewsir.space/en/feed.xml · Open the feed file itself (XML)
What is in the feed now
A hash-chained journal: what it catches and what it does not
How ledger-core builds a SHA-256 chain and checks it through /v1/verify, why tampering in the middle shows but tail truncation does not.
A QR code from scratch: Reed-Solomon, masks, proof
How a zero-dependency QR encoder in TypeScript is built, and four independent ways to check that the matrix is correct.
SM-2 and day boundaries: why the schedule is stored as dates
How flashcards-sm2 and habit-tracker avoid shifts from time zones and daylight saving: dates instead of timestamps and a movable day boundary.
SSRF in webhooks: checking the address after DNS
Why a webhook delivery service checks the addresses after DNS resolution, not the URL string, and how hook-relay connects to the very address it checked.
A token bucket on integers: what property tests check
How rate-gate computes a token bucket without floats, why milli-tokens, and which three properties the proptest property tests prove.
Double booking: a transaction plus a partial UNIQUE index
How booking-slots protects against two clients booking the same time at once, and how that protection is tested.
Lease and fencing: no lost jobs, no zombie double runs
A worker can crash, stall, or wake up after its job was taken by someone else. How the lease and the lease token in job-queue deal with that on SQLite.
p95 in an uptime monitor: nearest rank and its limits
How uptime-monitor computes p50/p95 latency and uptime, why the nearest-rank method was chosen, and where those numbers can mislead.
WebSocket on the standard library: what happens under it
Why realtime-rooms has its own RFC 6455 layer, which protocol violations it checks, and why a library is still the better choice for production.