Skip to main content

Software development insights compiled for you by the people of bitcrowd

· 13 min read
Lars

Code reviews are essential for software development in teams. They’re useful to share domain knowledge and best practices within the team, ensure consistent code quality, and lower the number of defects in the software. Reviewing code is hard though.

· 10 min read
Lars
In recent years, type systems in JavaScript have also reached the React community. So, with an exciting client on a new codebase and a limited scope, we took the plunge.

· 3 min read
Lars
In frontend projects with a redux store, all requests need to be authenticated. But how do you put the token into the store, but still have it in the API module?

· 8 min read
Philipp Tessenow

When debugging (or during security audits) it may be handy to know which data exactly is encoded in a session cookie. This is especially important because authentication frameworks like guardian store authentication secrets in sessions and we need to know they are stored securely. For the Phoenix web framework session cookies are encoded in a special format. In this post we follow Phoenix’ cookie storage implementation to find out how sessions are encoded.

· 6 min read
Philipp Tessenow

Summary​

On 2019-08-02 we at bitcrowd discovered a security vulnerability in simple_form. simple_form is one of the go-to ways to easily handle HTML forms in Ruby on Rails. The security issue allows arbitrary code execution in the worst case, but at least has potential for data corruption or DOS attacks. This security issue was responsibly disclosed by bitcrowd. Find details about the timeline of the events and a more detailed description below.

· One min read
Christoph Beck

We sometimes have to create HTML emails and there’s usually some aspects of them behaving differently depending on the email client people use.

This project, inspired by “caniuse.com” might be useful: https://www.caniemail.com/

· One min read
Christoph Beck

If you add a new file to your code which you want to add to git later, you can show that intent early with git add --intent-to-add. This is quite useful when want to add new files to the index (so you don’t forget about them later), but you’re still working on them and don’t want to add the content just yet 🥳

· One min read
Darren Cadwallader

Git is a useful tool for collaboration. However, we often experience conflicts when multiple people are working on the same branch.