Friday, March 28, 2014

CSRF - What it means to you!!

Here's a great summary of what can and can't happen with CSRF (cross site request forgery):

  1. http://www.playframework.com/documentation/2.2.x/JavaCsrf
  2. And how to prevent it: https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet
It's not as hard to protect against as it seems, and it's absolutely worth doing.

Monday, March 24, 2014

Moving to AngularJS

I'm done with the initial prototype of my "this is how you do it" application that I've been using for show and tell: https://bitbucket.org/ultimadj/bookbud-v4/wiki/Home

If you're a UI guy and you haven't done AngularJS, don't let the day pass without writing a basic app to check it out. IMHO, there's finally a "right" way to do web applications, and angular makes it possible.

Here's a getting started guide before you run through the AngularJS tutorial:
http://stackoverflow.com/questions/14994391/how-do-i-think-in-angularjs-if-i-have-a-jquery-background

Thursday, March 6, 2014

Jar Info Using SHA1 and search.maven.org

Here's a nifty tip...

Do you have a random jar from an old ant build with no useful information? Run shasum against the jar then do an advanced search on search.maven.org with the shasum value. BOOM, now you know the exact version, distributor and licensing information for that artifact!!

Screenshot - Get and search sum: http://screencast.com/t/jZZlZlFaIl
Screenshot - Results: http://screencast.com/t/U8VXf0gYgfU