This week Access All Areas members have a brand new premium icon set to download, courtesy of 1001FreeDownloads. This exclusive collection E-Commerce icons isn’t available anywhere else! It contains 37 graphics in a variety of formats, including vector AI, EPS & SVG, along with transparent PNGs. Use them to highlight call to actions within your […] The post Vector E-Commerce Icon Set for Access All Areas Members appeared first on Spoon Graphics.

Matthias Noback has written up an article on his site covering a tool that's common in many web applications, especially for testing: fixture data. In the post he makes some suggestions about effective ways to use them to provide more "real world" results for tests. System and integration tests need database fixtures. These fixtures should be representative and diverse enough to "fake" normal usage of the application, so that the tests using them will catch any issues that might occur once you deploy the application to the production environment. There are many different options for dealing with fixtures; let's explore some of them. He makes four suggestions of ways to handle fixtures: Generate them the "natural" way via interaction with the application and taking a snapshot of the data. Generate them at runtime for the tests, reloading them each time Manual insertion of custom data into the database for all tests Manual insertion of custom data into the database for each test case He finishes the post by asking a question for those considering using fixture data: do you need them at all? Testing should be isolated from external sources so maybe they're not really needed...

If you're excited about Hot Reload like me AND you also want an "A" grade from SecurityHeaders.com (really, go try this now) then you will learn very quickly about Content-Security-Policy headers. You need to spend some time reading and you may end up with a somewhat sophisticated list of allowed things, scripts, stylesheets, etc. In DasBlog Core (the cross platform blog engine that runs this blog) Mark Downie makes these configurable and uses the NWebSpec ASP.NET Middleware library to add the needed headers.if (SecurityStyleSources != null && SecurityScriptSources != null && DefaultSources != null){ app.UseCsp(options => options .DefaultSources(s => s.Self() .CustomSources(DefaultSources) ) .StyleSources(s => s.Self() .CustomSources(SecurityStyleSources) .UnsafeInline() ) .ScriptSources(s => s.Self() .CustomSources(SecurityScriptSources) .UnsafeInline() .UnsafeEval() ) );} Each of those variables comes out of a config file. Yes, it would be more security if they came out of a vault or were even hard coded. DasBlog is a pretty large and cool app and we noticed immediately upon Mark upgrading it to .NET 6 that we were unable to use Hot Reload (via dotnet watch or from VS 2022). We can complain about it, or we can learn about how it works and why it's not working for us! Remember: Nothing in your computer is hidden from you. Starting with a simple "View Source" we can see a JavaScript include at the very bottom that is definitely not mine!<script src="/_framework/aspnetcore-browser-refresh.js"></script> Ok, this makes sense as we know not only does HotReload support C# (code behinds) but also Markup via Razor Pages and changing CSS! It would definitely need to communicate "back home" to the runner which is either "dotnet watch" or VS2022. If I change the ASPNETCORE_ENVIRONMENT to "Production" (either via launch.json, launchsettings, or an environment variable like this, I can see that extra HotReload helper script isn't there:C:githubwshotreloadtest>dotnet run --environment="Production"Building...info: Microsoft.Hosting.Lifetime[14] Now listening on: https://localhost:7216info: Microsoft.Hosting.Lifetime[14] Now listening on: http://localhost:5216 Remember: You never want to use dotnet run in production! It's an SDK building command! You'll want to use dotnet exec your.dll, dotnet your.dll, or best of all, in .NET 6 just call the EXE directly! .inDebug et6.0wshotreloadtest.exe in my example. Why? dotnet run will always assume it's in Development (you literally tell it to restore, build, and exec in one run command) if you run it. You'll note that running the actual EXE is always WAY faster as well! Don't ship your .NET SDK to your webserver and don't recompile the whole thing on startup in production! We can see that that aspnnetcore-browser-refresh.js is the client side of Development-time HotReload. Looking at our browser console we see : Refused to connect to 'wss://localhost:62486/' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. That's a lot to think about. I started out my ASP.NET Web App's middle ware saying it was OK to talk "back to myself" but nowhere else. app.UseCsp(options => options.DefaultSources(s => s.Self())); Hm, self seems reasonable, why can't the browser connect BACK to the dotnet run'ed Kestrel Web Server? It's all localhost, right? Well, specifically it's http://localhost not ws://localhost, or even wss://localhost (that extra s is for secure) so I need to explicitly allow ws: or wss: or both, but only in Development. Maybe like this (again, I'm using NWebSpec, but these are just HTTP Headers so you can literally just add them if you want, hardcoded.)app.UseCsp(options => options.DefaultSources(s => s.Self()) .ConnectSources(s => s.CustomSources("wss://localhost:62895"))); But port numbers change, right? Let's do just wss:, only in Development. Now, if I'm using both CSPs and WebSockets (ws:, wss:) in Production, I'll need to be intentional about this. What's the moral? If you start using CSP Headers to tighten things up, be conscious and aware of the headers you need for conveniences like Hot Reload in Development versus whatever things you may need in Production. Hope this helps save you some time! Sponsor: At Rocket Mortgage(R) the work you do around here will be 100% impactful but won't take all your free time, giving you the perfect work-life balance. Or as we call it, tech/life balance! Learn more.(C) 2021 Scott Hanselman. All rights reserved.     

Regardless of whether you bake or not, you can take a lot of the same knowledge pastry chefs draw upon every day to improve your design work. The post 10 Things Designers Can Learn From Pastry Chefs appeared first on Speckyboy Design Magazine.

'A picture is worth a thousand words.' Most often pictures convey what they have to say. However, an image with text makes a stronger impact. Typography acts as a companion to your graphics. Typography is not just picking a random font and a point size from the drop-down menu of your editing software. It is a specialized field in graphic designing. It is the art and technique of arranging type. It is one of the important skills which can differentiate you from rest of the designers if you know how to use it. What is Typography? Before getting into the … Continue reading →Visit us at InstantShift.com

Quick, constant change is a given on the web. It is often one of its greatest strengths. As ever, though, there is a balance to find. Although longevity takes a different form online, its value is immeasurable.

If you are familiar with Javascript, or perhaps any other language, you may have run into an issue like this: console.log(0.1 * 0.2) // Returns 0.020000000000000004 // Should return 0.02

One of the truly cool and powerful features of WordPress is the ability to run a Multisite network. Install WordPress, create a network and you'll be able to manage any... The post 8 Essential Free Plugins for WordPress Multisite appeared first on Speckyboy Web Design Magazine.

Many employers assume that the only reason their staff shows up every morning is so they can score a paycheck at the end of the

With the holidays fast approaching, there are plenty of fun gifts for you in this roundup of new tools and resources for web designers. Make sure to share anything you find helpful with others to spread additional holiday cheer. Here's what is new for designers this month... Volley Volley, billing itself as Snapchat for work, […] The post Exciting New Tools For Designers, November 2021 first appeared on Webdesigner Depot.