投稿時間:2022-06-19 16:10:35 RSSフィード2022-06-19 16:00 分まとめ(11件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
js	JavaScriptタグが付けられた新着投稿 - Qiita	Laravel6+Vue.jsの連携手順	https://qiita.com/whopper1962/items/602bb294ac64081cc69c	compose	2022-06-19 15:47:57
js	JavaScriptタグが付けられた新着投稿 - Qiita	JavaScriptで配列を検索するメソッドについて	https://qiita.com/pyon_kiti_jp/items/a3ff3253baab5dd3ea0e	javascript	2022-06-19 15:41:08
Docker	dockerタグが付けられた新着投稿 - Qiita	Windows11にインストールしたDockerの動作確認	https://qiita.com/yukkawai/items/a9b1ed9c0657a4056f7d	docker	2022-06-19 15:31:44
海外TECH	DEV Community	Genics Log #2: Sponsorship from Vercel, Theme updates, Organic Growth and more	https://dev.to/genicsblog/genics-log-2-sponsorship-from-vercel-theme-updates-organic-growth-and-more-3nfn	Genics Log Sponsorship from Vercel Theme updates Organic Growth and moreWelcome to the second issue in the Genics log series I know this is super late in the month but I wanted to share some updates on the blog from the past months Listen to this article at Genics BlogBefore diving into the latest news at Genics I would like to introduce myself I am Gourav Khunger the founder of Genics Blog I am a teenager from India who is passionate about software development and open source In the last article in this series we talked about how we went open source and how we managed to grow from visitors month to visitors month along with sponsorship from BeyondWords This log is more inclined towards the core theme infrastructure and how we managed to grow our community to readers now Let s get started Staging ENVs with VercelThis was a crucial step in forming a better infrastructure for building the theme and its plugins Previous setupFrom the beginning itself I planned to create a separate repository for the theme just because it would allow us to use a separate GitHub Pages for staging genicsblog com This was the GitHub Actions file that deployed the theme to staging url We made sure to block indexing using the robots txt file s Disallow directive But here comes the tricky part the staging was not relevant until we were able to deploy PRs to preview them Staging environment for approved and merged PRs didn t matter as much as environment for previewing the pending PRs A huge problem was that we couldn t use repository secret variables in GitHub Actions if it ran using pull request event but those variables are needed to deploy to gh pages For that we had to use pull request target event trigger which allows PR actions to use the repository secrets to access the staging environment But the catch here is this comes with security vulnerabilities as the PRs are run in the context of the repository base and not the PR base This could mean that user can manipulate the workflow file to misuse the repository secrets Vulnerability in main repositoryThe above mentioned issue was actually present in the main repository I had setup a workflow for PRs using pull request target because I wanted to automerge correct changes to drafts by authors YES this was a big mistake but fortunately no one exploited this vulnerability using which one could clean up the whole repository in minutes making a delete commit and managing to automerge it using repo secrets I did have security measures in place An automerge happened only if the PR changes article files that are owned by the specific author The python script referenced takes in the list of files changed in the PR and goes through them to verify if the PR author is the actual author of the article files Now you could argue that a person could change the script in the PR and this check would easily be bypassed That is the reason that the workflow uses wget to download the script from the main branch and then run it It deletes the scripts in the PR and downloads the correct one before running But again I was still skeptical of the pull request target event trigger The docs don t clearly mention it but I am not sure If the action runs in context of the PR base then is it possible that the author change the action script and bypasses the script download and other verification checks This is the reason we now moved to Vercel to off load all these security issues and still be able to deploy staging ENVs Sponsorship from VercelVercel rel dofollow was generous enough to sponsor our GitHub organization to be able to deploy organization repositories for free Vercel is a platform for frontend frameworks and static sites built to integrate with your headless content commerce or database This sponsorship now enables us to remove our vulnerable GitHub actions and migrate to Vercel deployments It was as easy as setting up the installation and build scripts Vercel automatically deploys all PRs to staging environments Now we can easily preview pull requests and test them visually before moving them to production Theme updatesWe have worked on massive improvements to the theme and its plugins Paginating author pages This was by far the biggest need for the theme Author pages like this could get super big without pagination and that affects load times a lot This was a big problem for the Jekyll community as well there was no plugin to handle multiple authors with ease This lead me to spend time messing with jekyll paginate v and understanding how its pagination works With some days of effort I came up with jekyll auto authors which completely simplifies the process of paginating author pages Here s an in depth tutorial on using the plugin to paginate author pages Shortcut commands There are new shortcut commands you can use to perform these actions on the site Opening up search bar command K or Ctrl K To close it please use the Esc key Toggling the site theme command shift L or Ctrl Shift L Copy button for code blocks Copy buttons on code blocks have been given an overhaul and provide a much nicer user experience Spam commentsIn light of recent spam abuse of our commenting system we have removed the comment system for now We might use giscus in future but there s no plans for it right now Please use our Discord server for discussions on articles on the site Other updatesHere are some minor but relevant updates we ve made to the theme More open graph meta tags better for SEO Migration to GA Selection color for code blocks Refactoring series pages For authors tools like frontmatter generator and thumbnail generator Licensing for the theme and articles Stats Open SourceHere are the stats that changed from the last time genicsblog com Main repo with posts and data files stars forks theme files Basically template files stars fork Google AnalyticsHere are the recent day stats from our Google Analytics Join our Discord server to view these public stats every day Organic StatsAlmost of our monthly traffic is through organic channels Final WordsIt s been an absolute rollercoaster ride for us to get to this point It was from readers a month in December when I decided to open source the blog and start working on a newer and better version of it And here we are scaled to readers within months In the near future I plan to continue working on the improvements and scale to at least k readers per month Up to that point we will focus mainly on putting out quality content that people find insightful while focusing on gaining traffic through organic channels mainly After the k checkpoint there will be great things to come Looking forward to your feedback and suggestions	2022-06-19 06:14:19
海外TECH	DEV Community	Dev Tools Unleashed: 7 things you probably didn't know Dev Tools could do	https://dev.to/ruppysuppy/dev-tools-unleashed-7-things-you-probably-didnt-know-dev-tools-could-do-4b5d	Dev Tools Unleashed things you probably didn x t know Dev Tools could doThe Chromium Dev Tools provides a powerful toolset for debugging and testing web apps but most people are content with using it to check out only the elements and styling This article will open your eyes to the true power of the Dev Tools and how to use them to your advantage CSS Grid amp Flexbox Visual Editor Configuring Flexbox and CSS Grid can be complicated especially for beginners Luckily the Chromium Dev Tools have a built in visual editor makes the process a walk in the park Simply click the icon next to display flex or display grid in the Dev Tools and the visual editor pop open Box Shadow Editor To add box shadow that looks great in case they don t have a design ready developers often rely on trial and error which includes changing the values and reloading the site hundreds of times The Box Shadow Editor allows you to modify the shadow visually and see the updates on your site real time Layer Inspector The Layer Inspector provides a D view of the layers in your site which helps you debug why certain elements are not properly visible on the website In case you cannot find the Layer Inspector click the three dots on the top right gt Select More Tools gt Layers Animation Inspector Ever seen an incredible animation on some website but couldn t wrap your head around how it was made Using the Animation Inspector now you can easily check out the changes being made and even modify their timelines In case you cannot see the Animation Inspector you can open it up by selecting Animations under More Tools Check Code Coverage Wondering why your website takes ages to load up The Code Coverage tool will tell you exactly what percentage of your code is actually being used enabling you to get rid of unused code and improve your site s performance In case you cannot see the Coverage Inspector you can open it up by selecting Coverage under More Tools Throttle Network Speed ️Want to deliver outstanding performance to devices with slow connections too You can test out the experience by throttling the network speed The option to throttle are available under the Network tab in the Dev Tools Color Picker Just like the Box Shadow Editor the Color Picker allows you to modify the color of an element visually and see the updates on your site real time To get started click on the color icon on the left of the color value under the styles tab Did you know solving puzzles can make you smarter Check out our collection of puzzles on Amazon Thanks for readingNeed a Top Rated Front End Development Freelancer to chop away your development woes Contact me on UpworkWant to see what I am working on Check out my Personal Website and GitHubWant to connect Reach out to me on LinkedInFollow me on Instagram to check out what I am up to recently Follow my blogs for Weekly new Tidbits on DevFAQThese are a few commonly asked questions I get So I hope this FAQ section solves your issues I am a beginner how should I learn Front End Web Dev Look into the following articles Front End Development RoadmapFront End Project IdeasWould you mentor me Sorry I am already under a lot of workload and would not have the time to mentor anyone	2022-06-19 06:09:19
海外ニュース	Japan Times latest articles	In debate, Kishida voices caution on Japan acquiring nuclear sub	https://www.japantimes.co.jp/news/2022/06/19/national/politics-diplomacy/debate-kishida-voices-caution-japan-acquiring-nuclear-sub/	In debate Kishida voices caution on Japan acquiring nuclear subThe prime minister cited the difficulty of using nuclear power for military purposes under Japan s atomic energy law as well as high operating costs amid	2022-06-19 15:30:29
海外ニュース	Japan Times latest articles	Magnitude 5.2 earthquake jolts Ishikawa	https://www.japantimes.co.jp/news/2022/06/19/national/magnitude-5-2-earthquake-jolts-area-off-ishikawa/	intensity	2022-06-19 15:32:18
海外ニュース	Japan Times latest articles	Base opponents in a bind as SDF troops put down roots on far-flung Okinawan island	https://www.japantimes.co.jp/news/2022/06/19/national/yonaguni-sdf-troops/	presence	2022-06-19 15:30:18
海外ニュース	Japan Times latest articles	Despite growing evidence, a prosecution of Trump would face challenges	https://www.japantimes.co.jp/news/2022/06/19/world/politics-diplomacy-world/donald-trump-jan-6-prosecution/	Despite growing evidence a prosecution of Trump would face challengesAs House hearings highlighted testimony that could create more pressure to pursue a criminal case former president tried out a defense that strained credulity	2022-06-19 15:27:16
海外ニュース	Japan Times latest articles	Shogo Akiyama to return to Japan after lack of U.S. interest	https://www.japantimes.co.jp/sports/2022/06/19/baseball/mlb/akiyama-returning-japan/	Shogo Akiyama to return to Japan after lack of U S interestThe year old who joined the Reds on a three year million contract ahead of the season said he will fly back to his homeland	2022-06-19 15:07:04
北海道	北海道新聞	ウイグル産品輸入禁止法施行へ　米国、強制労働に圧力	https://www.hokkaido-np.co.jp/article/695416/	強制労働	2022-06-19 15:08:00