teknologi-umum / blog Goto Github PK
View Code? Open in Web Editor NEWBlog for Teknologi Umum
Home Page: https://teknologiumum.com/?utm_source=github
Blog for Teknologi Umum
Home Page: https://teknologiumum.com/?utm_source=github
Halo, maintainer.
Aku kemarin baca artikel kalo blog nya mau di terima adsense, ada berapa hal yang perlu dipastiin.
Contoh web:
Referensi:
Part 1:
Part 2:
Part 3:
Part 4:
Part 5:
Part 6:
Part 2:
Part 3:
Part 4:
blog/components/ContentPreview.tsx
Line 25 in 83c0c08
Redirecting to a URL that is constructed from parts of the DOM that may be controlled by an attacker can facilitate phishing attacks. In these attacks, unsuspecting users can be redirected to a malicious site that looks very similar to the real site they intend to visit, but which is controlled by the attacker.
To guard against untrusted URL redirection, it is advisable to avoid putting user input directly into a redirect URL. Instead, maintain a list of authorized redirects on the server; then choose from that list based on the user input provided.
The following example uses a regular expression to extract a query parameter from the document URL, and then uses it to construct a new URL to redirect to without any further validation. This may allow an attacker to craft a link that redirects from a trusted website to some arbitrary website of their choosing, which facilitates phishing attacks:
window.location = /.*redirect=([^&]*).*/.exec(document.location.href)[1];
References
OWASP: XSS Unvalidated Redirects and Forwards Cheat Sheet.
Common Weakness Enumeration: CWE-79.
Common Weakness Enumeration: CWE-116.
Common Weakness Enumeration: CWE-601.
security alert from codeql
List of people who give financial aid to Teknologi Umum through GitHub or Saweria.
I get this console error whenever I open a blog post with cookies disabled:
framework-2191d16384373197bc0a.js:1
DOMException: Failed to read the 'localStorage' property from 'Window': Access is denied for this document.
at R (https://teknologiumum.com/_next/static/chunks/pages/posts/%5Bslug%5D-403e3460e620a95d45a6.js:1:22273)
at ro (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:60216)
at Hu (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:112674)
at Pi (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:99848)
at xi (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:99776)
at _i (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:99639)
at vi (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:96605)
at https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:45984
at t.unstable_runWithPriority (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:130375)
at Wl (https://teknologiumum.com/_next/static/chunks/framework-2191d16384373197bc0a.js:1:45761)
Solution:
Check whether we can use localStorage
or not before using it
this is just a proposal, if you have a better idea, please do let us know
.
├── src
│ ├── routes - Literally the pages
│ ├── layout - Oh come on
│ ├── components - Reusable components
│ ├── lib - Internal libraries
│ └── utils - Utilities
├── content - Markdown files, categorized by year
│ ├── 2021
│ └── 2022, and so on forth
└── static
└── images - Pictures/screenshot (if any) to be referenced.
cc @elianiva
kayaknya aku gabisa ngoding sampe pertengahan minggu depan, banyak kerjaan mulai numpuk lagi
For now, I think we have 2 good contenders:
Reference link on Google Domains: https://domains.google.com/registrar/search?searchTerm=teknologiumum&hl=en&tab=1&sort=2
Why teknologiumum
instead of teknum
? Well, to be honest, I don't really recognize what teknum
is. It's easier for people to understand teknologiumum
rather than teknum
.
Easier to remember beats shorter domain name.
implement this: https://giscus.app/
why Github Discussions over Github Issues? biar rapih aja. let discussion be discussion and let issues be the place to report bugs and talk about the source code rather than the blog contents
cc @lamualfa minta tolong di install ke repo ini ya pak
Simple. Translate this Figma design into the web page: https://www.figma.com/file/0h7q7YktHjNxmj922pre2j/Teknologi-Umum-Blog?node-id=0%3A1
Because this is a blog, and our analytics shows that there's not much traffic going through the site, we can probably enhance it further by putting an RSS feed for people to consume.
There are already so many articles explaining how to create that with Next.js:
Currently the post card displayed is uneven. This is because there are different amount of topic badges. Ideally they should all have the same height.
Several possible solutions:
Shouldn't be that hard.
See this repo for reference
We'll need this for the post cover image. See #40 (comment)
jadi ane bikin printnya lebih make sense karena sebelumnya white space dan beberapa yg harusnya nggak perlu di print ke print.
ada problemnya:
I want to use the carbon alternative (graphene) but I forgot the app name, so it can be helpful if any page that shows a list of projects from title, description, & screenshot (if needed)
Maybe the repo name should change to "website" if this feature approved
select itu apa. kita harusnya bisa kopas sekali klik wkwkwk. kontent tentang panduan biasanya bikin gregetan pas kita select wkwkwk.
This is an easy Hacktoberfest PR that would likely be accepted by the Hacktoberfest team. And this should comply with the Hacktoberfest's quality standard.
Simply create a post article about anything, whether it's tech-related or not. Share your knowledge! Tell us your experience of using something! Tell us a story about how you went through a coding interview! Anything would be accepted as long it's not against the law.
A few resource to keep you up and running about Pull Requests:
Current "browse interesting topics" tags leads to nowhere. Implement the correct search function for this.
For more information about the search feature, try contacting @rubichandrap
Currently we have GitHub, Telegram, and Twitter on every author card just below the author's name in every blog post.
Now since some people are moving to Mastodon to expand their audiences, or because some people prefer Mastodon as it's more FOSS than Twitter (or for whatever reason), we should support it.
We should add another prop on the AuthorCard
component, the value should be @username@host
. For example: @[email protected]
. The link then should be parsed to https://hachyderm.io/@mustafasegf
.
blog/components/AuthorCard.tsx
Line 6 in 1a9e8ce
One edge case: It should also handle multiple @
(at) points. Like @[email protected]@social.gnuweeb.org
, it should be parsed to https://social.gnuweeb.org/@[email protected]
We're using Next v12 with Node v16 currently, which is pretty old. We should migrate to newer version of next and bump the version of the rest of the dependencies that we use to make the blog up and running.
Currently, user will see light mode for a split second before the dark mode applies on page reload/visit. The reason is there’s a pause after user visits the page until the dark mode script runs.
There’s probably an off-the-shelf library that takes care of the flash like next-themes. Or since we already have the logic for setting dark mode, the final stretch is to move it to a <script>
tag before the <body>
as outlined in https://hangindev.com/blog/avoid-flash-of-default-theme-an-implementation-of-dark-mode-in-react-app
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.