Syntax &#8211; Tasty Web Development Treats

738: Little Scripts: Coding for your Co-workers Mar 04, 2024

Show notes

Process is important. This show is dedicated to examples of non-developer tasks that can be improved by coding scripts. Join Scott and Wes for a deep dive into automation magic.

Show Notes

00:00 Welcome to Syntax!
02:11 Brought to you by Sentry.io.
03:02 FFmpeg, a tool for video producers.
FFmpeg
FFprobe
06:35 Markdown validation.
Syntax Markdown Validation
09:21 AI timestamps for inform editing process.
Episode 456 Transcript
12:19 Generating clips for social media.
13:31 YouTube find and replace tool.
YouTube Find & Replace - work in progress
15:03 What other scripts can you create?
16:17 Packaging a tool for a non-developer to use.
- 16:54 Apple Scripts
- 17:45 Stand-alone website.
- 19:25 Script Kit: Shortcut to Everything
- 20:19 Other ways to run scripts.
- ZX
- Dax
22:05 Get in touch with your tips.

Hit us up on Socials!

737: JSR: The New TypeScript Package Registry (NPM Killer) Mar 01, 2024

Show notes

Get ready to learn all about the JSR package registry with Wes, Scott, and special guest Luca Casonato of Deno, as they discuss its benefits, share insights on when to use it, and teasing some secret features that promise to enhance your coding journey.

Show Notes

00:00 Welcome to Syntax!
00:37 Brought to you by sentry.io.
00:51 Who is Luca Casonato?
01:18 Why do we need another package registry?
Wes Bos Tweet
04:35 Is it ESM only?
06:08 What exactly is JSR?
07:22 How do you install things from this registry?
09:38 NPM specifier in NodeJS?
12:18 Why can’t we just fix NPM?
14:28 When you make things easier, people make cooler stuff.
17:49 A little bit about auto-documentation.
21:18 Auto-Types.
22:33 Can’t you just put TypeScript files on an NPM?
24:04 Package Provenance.
NPM Package Provenance
25:14 Does JSR have any plans for scanning dependencies?
27:56 GitHub action integration.
30:08 Does JSR replace url imports in Deno?
Import Maps, Ep.596
32:15 What about publishing JSX, TSX, CSS, WASM, etc?
34:16 What are Slow Types?
36:34 Do you think we’ll ever see another implementation of a TypeScript type checker?
38:23 Types as comments or adding types to JavaScript.
40:10 What is the anticipated timeline?
41:52 Are there any parts of TypeScript that you don’t like?
43:32 What about when TypeScript breaks?
46:20 JSR community funding.
49:39 Are you planning on pre-registering popular names?
52:26 Super secret new features!
56:39 Sick Picks + Shameless Plugs.

Sick Picks

Luca: Hono

Shameless Plugs

Luca: jsr.io

Hit us up on Socials!

736: CJ Reynolds is Joining Syntax Feb 28, 2024

Show notes

Scott and Wes introduce Syntax’s new Senior Content Producer, CJ Reynolds, who will be creating video deep-dives and companion content for topics covered on the podcast. CJ, also known as the host of Coding Garden, shares his passions for web development, teaching and experimenting with new technologies.

Show Notes

00:00 Welcome to Syntax!
01:06 Brought to you by Sentry.io.
04:39 What got you into web development?
09:23 Does a degree in computer sciences help you in your day to day as a web developer?
Bell Curve Meme
11:39 Wes downloads every single .com domain name.
15:19 What was your very first web development job?
18:12 How did you go from C# to websites?
21:12 What is the worst thing you’ve had to do as a developer?
22:31 What are some of your favorite projects?
Is It New Years Day
Dung Hero
26:32 What tech are you into right now? What inspires you?
27:52 Why do you like experimenting with new technologies?
29:39 Hono v4.0.5.
30:29 HTMZ
31:44 If you were to build a startup today, what would your stack be?
32:39 What’s your tech setup?
Coding Garden GitHub
RK Royal Kludge Keyboard
37:51 What got you into live-streaming?
40:13 Why do you use a blue screen?
41:19 What’s your philosophy on teaching?
Bloom’s Taxonomy
43:56 What are your non-developer hobbies?
CJ Skateboarding with Syntax deck
CJ’s floofy doggo, Pig
Sony VX10000
Sony Mavica
51:00 Sick Picks + Shameless Plugs.

Sick Picks

CJ: Ergonomics, More on Ergonomics
Scott: Project Farm YouTube trash bag comparison
Wes: Kitchy Pizza Cutter Wheel

Shameless Plugs

CJ: Coding Garden
Scott: Syntax on YouTube

Hit us up on Socials!

735: The Taliban Stole My Domain Feb 26, 2024

Show notes

Wes shares the story of how the Taliban stole his .af domain. Scott and Wes discuss top-level domain (TLD) best practices, how to find unique custom domain names for your website, and how to avoid having yours stolen.

Show Notes

00:00 Welcome to Syntax!
00:16 Brought to you by Sentry.io
01:11 The story of how the Taliban stole my domain.
05:10 When you purchase a domain, does that country receive the registration fee?
Country Code Top-Level Domain
Infrastructure Top-Level Domain
Generic Top-Level Domain
Sponsored Top-Level Domain
07:29 Notion lost their .so domain.
Notion
09:18 .ai domain names.
09:53 Other popular TLD options.
tolin.ski
wes.io
12:05 What are the best TLDs?
13:18 iwantmyname

Hit us up on Socials!

734: HTMX Web Apps with Carson Gross Feb 23, 2024

Show notes

Scott and Wes welcome HTMX creator Carson Gross to discuss the versatile applications and optimal scenarios for using HTMX, alongside insights into its creation and evolution. Join us as we explore the future prospects and improvements as we look towards HTMX 2.0.

Show Notes

00:00 Welcome to Syntax!
00:52 Brought to you by Sentry.io
02:22 Who is Carson Gross?
BigSkySoftware GitHub
BigSkySoftware
03:53 What exactly is HTMX?
htmx.org
htmx.org/examples
07:04 What made you want to create something like HTMX?
intercooler.js
10:01 Would HTML look more like HTMX if we were to rebuild it today?
12:54 Isn’t HTMX a step backward into old-school AJAX?
16:09 When would you avoid using HTMX?
17:56 Does HTMX put an unnecessary load on the server?
21:46 What are your thoughts on rendering everything on the server?
26:29 What is your favorite stack?
28:49 Things that are lost moving to the JavaScript framework world.
30:16 HTMX coupling your front end and back end.
32:28 How do you feel about web components?
33:40 What are the big templating engines and your top pick?
HTMX Essays
36:33 Object-oriented HTML.
37:38 Is there an offline story or a “local-first” story for HTMX?
38:44 What does the future of HTMX look like given its rise in popularity?
40:03 HTMX and X (Twitter).
Syntax Show 726
HTMX on X
42:30 The Microsoft story.
45:26 Carson’s thoughts on de-escalating the language around HTMX.
47:44 Sick Picks + Shameless Plugs.

Sick Picks

Carson: AlpineJS, Datastar

Shameless Plugs

Carson: Hypermedia Systems, HTMX Swag

Hit us up on Socials!

733: Egress, scraping, Safari EU changes, is SetInterval worth it? Feb 21, 2024

Show notes

In this potluck episode of Syntax, Wes and Scott discuss egress, scraping, Safari EU changes, and answer questions on updating dependencies and SetInterval.

Show Notes

00:00 Welcome to Syntax!
01:35 Brought to you by Sentry.io.
02:49 I have over 100,000 user images on Cloudinary. How do I migrate to another service?
Cloudflare-Cloudinary Proxy
07:27 Switching from Mac to PC.
Figma, DaVinci Resolve
12:32 What’s your take on the Safari 17.4 PWA removal debacle for EU users?
Bug Report
Fullscreen API Bug Report
19:45 Is there any clear front-runner when it comes to monorepo tools?
23:44 Some big web apps have a div relatively high in the DOM with a class like “scroll-container” or “cursor-events”, why is that?
32:15 Is ChatGPT Plus worth it? I’m trying to avoid death by 1000 subscriptions.
ElevenLabs
37:47 Performance vs accuracy when working with timers.
40:37 How do you update the dependencies to work with a current version of Node? Also, if you are building from scratch, how do you determine what dependencies to use?
Syntax show 425: Updating Project Dependencies
45:52 Clarification on the browser blocking.
Mozilla’s vision for Firefox MV3
49:19 Problems when working with JavaScript’s new Date().
54:27 Sick Picks + Shameless Plugs.

Sick Picks

Scott: LED Flashlight

Shameless Plugs

Wes: Syntax YouTube

Hit us up on Socials!

732: Stop going to Spam: DMARC, SPF and DKIM Explained Feb 19, 2024

Show notes

Wes and Scott explore the web standards and email authentication methods that keep your email from going to spam; DMARC, SPF and DKIM. If you send email via a custom domain name, you need to listen to this!

Show Notes

00:00 Welcome to Syntax!
01:06 Brought to you by Sentry.io.
02:08 What exactly are SPF, DKIM, and DMARC?
02:53 Different ways that you may want to send email.
- 03:23 Transactional emails.
- Resend, email for developers
- 05:07 Email marketing.
- 05:47 Anything else that sends email on your behalf.
07:13 SPF (Sender Policy Framework).
Postmark defines SPF
Postmark SPF in 5 Minutes
08:34 You can only have one SPF record.
10:18 DKIM (DomainKeys Identified Mail).
Postmark defines DKIM
13:39 DMARC (Domain-based Message Authentication, Reporting, and Conformance).
Convertkit
16:38 RUA Reporting.
18:03 How to set up reporting.
21:08 Does emails marked as spam hurt the IP that sends them?
22:18 Other things to consider.
Special thanks to David Flanagan for the help on this! @rawkode

Hit us up on Socials!

731: Client side security, XSS attacks & CSP with Stripe’s Alex Sexton Feb 16, 2024

Show notes

Scott and Wes are joined by security expert, Alex Sexton of Stripe to cover all things: client security, XSS, attack vectors, and CSP (content security policy).

Show Notes

00:00 Welcome to Syntax!
00:31 Brought to you by Sentry.io.
00:57 Who is Alex Sexton?
04:44 Stripe dashboard is a work of art.
05:08 Tell us about the design system.
React Aria
08:59 Who develops the iOS app?
09:50 Stripe’s CSP (content security policy).
12:50 What even is a content security policy?
Content Security Policy explanation
13:57 Douglas Crockford of Yahoo on security.
Douglas on GitHub
15:13 Security philosophy.
16:59 What about inline styles and inline JavaScript?
19:41 How do we safely set inline styles from JS?
20:20 Setting up with meta tags.
22:52 What are common situations that require security exceptions?
26:24 Potential damage with inline style tags.
32:45 Looping vulnerabilities.
36:32 What about JavaScript injection?
37:09 Myspace Samy Worm.
Myspace Samy Worm Wiki
Sentry.io Security Policy Reporting
42:02 Does a CSP stop code from running in the console?
43:28 What are some general security best practices?
46:35 Strategies for rolling out a CSP.
51:49 Final tip, Strict Dynamic.
Strict Dynamic
56:36 Where does the CSP live within Stripe?
Original Black Friday story
59:35 One last story.
01:01:20 Sick Picks + Shameless Plugs

Sick Picks + Shameless Plugs

Alex: Wes Bos’ Instagram

Hit us up on Socials!