Make your Vue & Nuxt apps MORE SECURE!

Поделиться
HTML-код
  • Опубликовано: 2 дек 2024

Комментарии • 19

  • @TheAlexLichter
    @TheAlexLichter  4 дня назад +7

    Time to remove some v-html folks? 👀

    • @kirayamato6128
      @kirayamato6128 4 дня назад

      nice click bait dude

    • @TheAlexLichter
      @TheAlexLichter  4 дня назад

      Lol what? Why bait?

    • @rylanharper
      @rylanharper 3 дня назад

      The only way to get descriptions/metafields in the Shopify Storefront API is by using v-html 😭

    • @TheAlexLichter
      @TheAlexLichter  3 дня назад

      Why do you need v-html for it?
      Is it just the meta tags as HTML that’ll be delivered?

  • @jacobandrewsky
    @jacobandrewsky День назад +1

    Great video as always Alex! Can't wait for the next friday! 🚀

  • @fmoessle
    @fmoessle 4 дня назад +2

    Getting better with every video!

    • @TheAlexLichter
      @TheAlexLichter  4 дня назад

      Thank you! Anything on your mind that I could do better?

  • @VELIXYZ
    @VELIXYZ 3 дня назад +1

    I am here from the first video, thank you Alex, love your videos

    • @TheAlexLichter
      @TheAlexLichter  День назад

      Thank you for sticking around mate! 🙏💚

  • @impactsongs
    @impactsongs 2 дня назад +1

    Nice video Alex.
    I'm coming from Angular and there we use services to make request like repository, get, store, update and etc.
    I see you video about pojo and i out of classes and create interfaces now and composables like
    const { index, update } = useService()
    let user = await index();
    This is a good approach?

  • @yannmoari
    @yannmoari 5 часов назад

    very usefull video alex !!! thank you

  • @frederickvalone6729
    @frederickvalone6729 4 дня назад

    What if you have a a feature that uses v-html to render help text popups with rich content? If the application allows very little user input that gets saved to the db (in our case comments is the only input we take). The comments are validate on the frontend and in the api prior to adding to the database and the comments are then reviewed before being approved to be displayed on the site). Is the use of the help texts from the database a valid security concern if the only way to add or update these items is though a dba? I have wanted to switch to another form of maintaining this content but have not had a lot of by-in from the management.

    • @TheAlexLichter
      @TheAlexLichter  4 дня назад

      Rich Content = HTML with Italic, Bold tags etc.? Then yeah, DOMPurify + validate on the backend would be my recommendation.

  • @valacshiro378
    @valacshiro378 4 дня назад +1

    Nice tips thanks You 😊

  • @kirayamato6128
    @kirayamato6128 4 дня назад

    very nice click bait