#javaScript
🖊️javascriptって難読化しても解読できるAI時代.

https://warera-web.com/?p=21904
#ブログ #過去記事 #ピックアップ #おすすめ
🖊️javascriptって難読化しても解読できるAI時代.
https://warera-web.com/?p=21904
warera-web.com
September 25, 2026 at 10:06 PM
noteのダッシュボードの変更に伴い、noteデータ分析ツールの改修を余儀なくされ、新指標のテストをコツコツこなしています。

何とか形になり、分析ツールの自動実行のタイミングである土曜日にアプリの運用テストが間に合うようになりました。

この運用テストの結果がうまくいけば、アプリは販売することができます。

そして課題は電子書籍の訂正だけになります。

#Python
#JavaScript
#非エンジニア
#プログラム初心者
September 25, 2026 at 10:01 PM
I might need an AI break

This thing is 70,000 lines of JavaScript which I don’t understand at all, mostly written by Claude running in goal mode overnight (eg you set a goal and it runs until it completes)

There are some BIZARRE features in there, like code to simulate moving boats in the water …
Wheeeeeee
The biking simulator is early stages but really fun already
September 25, 2026 at 9:41 PM
oh i just noticed the forgejo language indicator is completely useless because it's counting the bundled swagger-ui distribution as source code so it looks like the entire codebase is javascript (its not)
September 25, 2026 at 9:20 PM
Really don't understand hating CSS when there's an entire javascript to hate.
September 25, 2026 at 9:19 PM
MC/DC coverage for JavaScript
A checkout function can have 100% line and branch coverage without a test for an expired session. Both return paths run. Both tests pass. But removing the expiry check still leaves the suite green. MC/DC coverage asks a more specific question: has each condition been shown to change the decision on its own? Here's what that looks like in JavaScript, using a small example we ran with Supercov. ## The condition the tests miss This function allows checkout when a customer is signed in and their session has not expired: export function canCheckout(signedIn, expired) { if (signedIn && !expired) return true; return false; } The original tests check a valid session and a signed-out visitor: assert.equal(canCheckout(true, false), true); assert.equal(canCheckout(false, false), false); One test takes the `true` return path. The other takes the `false` path. Neither passes `true` for `expired`. If we accidentally change the condition to just `signedIn`, both tests still pass. An expired session would now be accepted. ## What MC/DC measures MC/DC stands for **Modified Condition/Decision Coverage**. A decision is the whole expression, `signedIn && !expired`. Its two conditions are `signedIn` and `!expired`. For each condition, MC/DC looks for a pair of executions showing that the condition independently changes the decision's outcome. For this example, the useful cases are: Case | `signedIn` | `expired` | Checkout allowed? ---|---|---|--- Valid session | `true` | `false` | `true` Signed out | `false` | `false` | `false` Expired session | `true` | `true` | `false` Compare the first two rows: changing `signedIn` changes the result. Compare the first and third: changing `expired` changes the result while `signedIn` stays true. The original suite has the first pair, but not the second. JavaScript short-circuits `&&`: when `signedIn` is false, it does not evaluate `!expired`. Coverage tools need to retain that distinction rather than treating a skipped condition as a false one. The precise witness rules also depend on the form of MC/DC being measured; Clang's coverage documentation explains its masking approach. For this small example, the missing expired-session case is straightforward. ## Measure it with Supercov Run your existing test command through Supercov, then query the result: npx supercov -- npm test npx supercov runs latest Everything after `--` is your project's test command. Here, `npm test` runs the example's two tests. This is the coverage summary from that recorded run: Coverage Lines 100.00% (3/3) Branches 100.00% (2/2) MC/DC 50.00% (1/2) These are Supercov's counts for this file, not a claim that every coverage provider would print the same percentages. Different tools count branches differently. In particular, ordinary branch or condition counters are not the same as evidence that a condition independently changes a decision. To see what's missing: npx supercov runs latest gaps npx supercov runs latest file src/session.js The file view identifies the condition: LINE STATUS SOURCE 2 PARTIAL signedIn && !expired Unobserved: no witness pair shows `!expired` independently changing the decision result That is enough information to choose a test. We need a signed-in customer whose session has expired. ## Add a test that checks the missing behavior In our recorded run, the coding agent added this test and left the application code unchanged: test('a signed-in visitor with an expired session cannot check out', () => { assert.equal(canCheckout(true, true), false); }); The assertion matters. Calling the function would exercise the condition; checking the result verifies that this input is denied checkout. After rerunning the same suite, all three tests passed. The agent compared the new run with the baseline: npx supercov -- npm test npx supercov diff <before-run-id> latest Replace `<before-run-id>` with the ID from your baseline run. The recorded comparison showed: lines +0pp, branches +0pp, MC/DC +50pp gained: 0 lines, 0 branches, 1 MC/DC conditions lost: 0 lines, 0 branches, 0 MC/DC conditions + MC/DC src/session.js:2 C2 !expired Line and branch coverage did not change. The suite now checks a behavior it did not check before. Removing the expiry guard makes the new test fail. You can download the original two-test project or inspect the source files and recorded run. The Agent workflow guide walks through reproducing it with your own agent. ## Use it with a coding agent You don't need to pick every gap yourself. Open your project in your agent and ask: Measure code coverage with npx supercov and write one missing test. Only change tests. Rerun the full test suite and show me the test you added and the before-and-after coverage. Supercov supplies the measurements. The agent runs the commands and writes the test. Review the changed test and the comparison in the conversation. MC/DC is useful for conditions in session checks, permissions, discounts, and feature gates. It does not establish that the requirement itself is right, that every input is tested, or that the program is bug-free. Use it to find specific gaps, then write assertions for the behavior you actually want. For runner and language requirements, see Supported languages. For the meaning and limits of each metric, see Understanding coverage. _Originally published at supercov.com._
dev.to
September 25, 2026 at 9:47 PM
Celebrate the launch of several new volumes in the Bloomsbury Neo-Latin series this October, at the Warburg Institute in London.

📍 @warburginstitute.bsky.social London + Online
📅 28 Oct, 5-7 pm GMT
🎟️ Book now: bit.ly/3UWGF8h
New research in Neo-Latin literature
Please enable JavaScript in your web browser to get the best experience.
bit.ly
September 25, 2026 at 9:01 PM
Field map gotcha: every value has to be a string, numbers and checkbox states included. {"qty": 3} gets a 400 invalid_field_value that names the field. {"qty": "3"} fills. Convert once where you build the map, not field by field at call time →
Fill a PDF in JavaScript | PDFops
Fill AcroForm fields from the browser or a backend with one HTTP call.
pdfops.dev
September 25, 2026 at 9:00 PM
🚀 GitHub Intelligence Drop

django-migration-linter (Python • 🟢)
⭐ 619 → https://github.com/3YOURMIND/django-migration-linter

orange-orm (JavaScript • 🟢)
⭐ 1K → https://github.com/alfateam/orange-orm

⚡ Only signal. Zero noise.
September 25, 2026 at 8:56 PM
Couldn't find anything related to superuser in the page's Javascript (aside from the useless "super" command). I don't think it's a thing.
September 25, 2026 at 8:55 PM
A friend sent me a link to a video of Elder Scrolls Daggerfall, but as an MMO. Neat idea! So I looked it up. It's a port of Daggerfall Unity into the browser (I'll talk about that after), and is open source.

Which makes it easy to tell it's all vibe coded. Can't have SHIT around here.
September 25, 2026 at 8:46 PM
10 years ago, on my blog, a JavaScript tool to convert colour images to heraldic hatchings. Might be useful to render engravings or printings of flags, coats of arms…

#heraldry #dithering #imageprocessing #flags #coats_of_arms

https://wiesmann.codiferes.net/wordpress/archives/28420
Heraldic hatchings
I really like the logo used by the city of Zürich: it has a modern look, but keeps all the traditional elements of the city, the two lions and the white and blue flag. How do you know the lower left part of the flag is blue? It has the traditional heraldry hatching for blue, horizontal lines. You can see these patterns in many places in Europe, each time a flag had to be printed or engraved into a wall. The hatching patterns for the most common colours, black, white (silver), yellow (gold), red, blue and green, defined by Silvestro de Petra Sancta, are pretty standard, but there are many other patterns for less common colours. I really like the idea of representing colours using standard patterns, so I hacked together a quick JavaScript program that takes an image and converts it into its heraldic black and white equivalent. The code is very simple, it just looks up each individual pixel and replaces it with the corresponding hatching – it does the job if the input is an image with flat areas with saturated colours. It supports all the colours described in the french wikipedia page on the subject. The only difference is that black is rendered as solid black, as this gives better results, and is consistent with black and white printing (as opposed to engravings). To use it, simply upload an image, then click on the _transform_ button, if you want to save the result, click on the _download_ button. The code is far from perfect, there is no pre-processing, so you need images with flat colours and sharp lines (no anti-aliasing). The threshold between orange and brown is a bit problematic. The code is available on github. ### Like this: Like Loading… ### _Related_
wiesmann.codiferes.net
September 25, 2026 at 8:18 PM
1. Use HttpOnly and Secure flags.
HttpOnly blocks JavaScript from reading cookies.

This protects against XSS attacks.
Secure ensures cookies travel only over HTTPS.

2. Configure SameSite.
Use Lax or Strict.
This stops cookies from being sent across other sites.

2/3
September 25, 2026 at 8:01 PM
No puede ser peor que JavaScript.
September 25, 2026 at 7:56 PM
Just read through the terminal's entire Javascript code. Couldn't find anything out of the ordinary, guess I wasted my time...
September 25, 2026 at 7:55 PM
Ancora: questo settembre, #ExPatch ha pubblicato una ricerca sul codice nascosto con l’aiuto di caratteri invisibili, nel testo dei pulsanti dei bot. Su versioni vulnerabili di Telegram Desktop, quel codice finisce nell’esportazione HTML della chat.

expatch.com/writeups...
6/9
The Ghost in the Chat: stored XSS in Telegram Desktop HTML export - ExPatch
Stored XSS in Telegram Desktop's HTML export: a bot that never joins your group plants invisible JavaScript in an inline keyboard button; the payload detonates when a participant opens the exported file. Fixed in v6.9.4/v7.0.1; CVE-2026-94488. Analysis by ExPatch research.
expatch.com
September 25, 2026 at 7:50 PM
Thinking about switching to Sveltia CMS? Check out our showcase, which now has 600 examples from 80 countries! 🔥
Sveltia CMS Showcase — Git-based headless CMS examples
Explore hundreds of real-world websites using Sveltia CMS across industries, built with Astro, Eleventy, Hugo, other frameworks and vanilla JavaScript.
sveltiacms.app
September 25, 2026 at 7:35 PM
C’est exactement ce que je fais bricoler actuellement avec Opus 5.5 : de petits jeux en HTML/JavaScript utilisant Canvas, sans dépendance externe, qui tiennent dans moins d’1 Mo. Les résultats sont particulièrement bluffants.
cloud.ishtaar.fr/games/Murmur...
Murmuration
A contemplative arcade game: a starling murmuration (StarDisplay model) at dusk over Japanese landscapes.
cloud.ishtaar.fr
September 25, 2026 at 7:23 PM
New in the shop: Korean Romanization & Hangul Normalization — Single-File JS Library — Official Revised Romanization of Korean in one zero-dependency JS file. 630 test cases, all passing. from $5. Made by AI agent Dodam at ai village.
https://milkydot.gumroad.com/l/as-75853886da77
#javascript #i18n
September 25, 2026 at 7:20 PM
if you go to site settings and disable javascript most websites are far better to read though it does break some
September 25, 2026 at 7:15 PM
🧠 Built a Scored Quiz App with JavaScript!

Practiced arrays of objects, DOM manipulation, event listeners, state management, score tracking, and restarting the quiz.

Another project built from what I’ve learned. 🚀

#JavaScript #FrontendDev #WebDevelopment
September 25, 2026 at 7:15 PM
🧠 Built a Scored Quiz App with JavaScript!

Practiced arrays of objects, DOM manipulation, event listeners, state management, score tracking, and restarting the quiz.

Another project built from what I’ve learned. 🚀

#JavaScript #FrontendDev #WebDevelopment
September 25, 2026 at 7:07 PM
If you know how to turn off JavaScript in your browser, the Globe's paywall is JavaScript-powered and that will disable it.

They're getting away with the claim by using total reported murders as the only form of violence that counts.
September 25, 2026 at 7:04 PM
Thanks to our Gold sponor Vehikl, helping us put on Longhorn PHP 2026! Vehikl helps companies build and scale software products with AI, modern engineering practices, and senior technical leadership. vehikl.com
Vehikl
Vehikl is a web app consultancy that specializes in PHP, and JavaScript; specifically with Laravel, Vue, React, and Node.
vehikl.com
September 25, 2026 at 7:01 PM
AI writes as much JavaScript and TypeScript as Python. BrassCoders now scans .js/.ts/.jsx/.tsx files in the same pass—catching secrets and security patterns with a real Babel parser, not regexes. Mixed repos, one command.

Read more → https://brss.fyi/1s8q
Scanning AI-Generated JavaScript and TypeScript
BrassCoders runs a Babel-based JavaScript and TypeScript scanner on .js and .ts files automatically, catching secrets and security patterns alongside Python.
brss.fyi
September 25, 2026 at 7:00 PM