Latest Updates

Documenting code, one commit at a time.

English 10 posts
×
JavaScript

Elevating User Engagement with a Referral Earnings Dashboard Widget

Motivating users to actively participate in referral programs can significantly boost acquisition and growth. We recently enhanced our application's user dashboard with a new widget designed to provide transparent insights into referral earnings and commission structures.

This widget serves as a central hub for users to understand and leverage their referral potential, directly from their

Read more
PHP

Enhancing Context Anonymization for AI-Powered Content Generation

Introduction

Our team has been developing an AI-powered system to assist in content creation for technical blog posts. A key challenge has been ensuring that the AI doesn't inadvertently expose sensitive internal information during the content generation process.

The Challenge

Initially, the AI model occasionally included internal file paths, project names, and code snippets in its

Read more

Enhancing AI Auditability: From Raw Diffs to Structured Summaries

Improving the way we audit code changes is crucial for maintaining security and stability in our applications. Recently, we transitioned from feeding raw Git diffs directly to our AI analysis tools to using structured summaries. This shift significantly enhances auditability and reduces the risk of exposing sensitive information.

The Problem with Raw Diffs

Sending raw diffs to AI models

Read more
JavaScript

Enhancements to Manual Post Generation: Introducing Random Mode

Introduction

We've recently enhanced our manual post generator with a new "random mode." This feature streamlines content creation by automating the selection of post examples and additional prompts. This post will discuss the benefits of this new mode and the refactoring involved in its implementation.

Random Mode Functionality

The core addition is the ability to toggle a "random mode"

Read more
PHP JavaScript

Faster Feedback Loops: Running Tests on Git Changes

Long test suite run times can significantly slow down development. Running the entire suite for every change, especially in larger projects, becomes inefficient. A focused approach that executes only the tests relevant to the modified code provides quicker feedback and accelerates the development cycle.

The Challenge: Identifying Relevant Tests

The primary challenge lies in accurately

Read more
PHP

Ensuring Consistent State Propagation in Post Generation

Introduction

During post generation, it's crucial that all relevant state information is correctly passed and maintained throughout the process. Inconsistencies in state propagation can lead to unexpected behavior and data integrity issues. This post examines a recent fix addressing a state propagation problem related to safe mode during post generation.

The Problem

The safe_mode

Read more
Python

Mitigating False Positives in Security Audits for Code Examples

Introduction

Security audits are crucial for maintaining the integrity of applications. However, overly sensitive rules can lead to false positives, particularly when dealing with illustrative code examples. This post discusses how to refine audit rules to distinguish between genuine security vulnerabilities and intentionally simplified or educational code snippets.

The Challenge:

Read more
PHP

Selective Auditing for Enhanced Security in Our Application

We've recently introduced a significant enhancement to our application's security auditing capabilities. This update allows users to perform targeted security audits on specific posts, providing a more efficient and focused approach to identifying potential vulnerabilities.

The Need for Selective Auditing

Previously, security audits were conducted on all tenant posts, which, while

Read more

Fine-Grained Security Audits with Configurable Rules

Enhancing security auditing in our application allows for more granular control and customization. We've moved from a simple pass/fail audit to a system where each security rule is evaluated independently, providing detailed feedback and enabling tenant-specific configurations.

From Single Verdict to Per-Rule Evaluation

Previously, security audits resulted in a single, overall verdict.

Read more