curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity
342 Commits 3 Branches 0 Tags 38 MiB
Commit Graph

342 Commits

Author SHA1 Message Date
curben 09c855ee43 Merge branch 'renovate/renovate-18.x' into 'master' 
chore(deps): update dependency renovate to v18

See merge request curben/blog!21
 2019-06-02 10:44:17 +00:00
Renovate Bot a82e2b16f4 chore(deps): update dependency renovate to v18 2019-06-02 07:36:29 +00:00
curben 2b3302bdf8 style: remove 'how to' from title and filename 2019-06-02 14:33:31 +09:30
curben b03b23e44e chore: install git 
ef96081fc7 fix requires git
 2019-06-02 14:31:08 +09:30
curben ef96081fc7 fix: cheerio doesn't escape '<' character 
https://github.com/weyusi/hexo-nofollow/issues/4
 2019-06-02 14:12:45 +09:30
curben 60d62f94f3 feat: add search function to mobile page 
* add a gap after search form to prevent misclick
* use addEventListener() instead of onclick()
  - https://stackoverflow.com/a/34216918
 2019-06-01 18:51:51 +09:30
curben 035dc384ee docs(post): Add 'How to embed SVG without using img tag' post 2019-06-01 18:02:36 +09:30
curben 824c11059d refactor: remove fill attribute from svg 
it's already set in typing.css
 2019-06-01 18:01:43 +09:30
curben c601a31b13 refactor: array in one line 2019-05-30 19:20:20 +09:30
curben 0fe5658173 fix(sitemap): remove index.html from url 
a92dbbb83c
3fccc82d3a
 2019-05-30 19:18:11 +09:30
curben 4a785a6cf1 fix: exclude webmaster verification file from rendering 
fix(sitemap): skipRenderList shouldn't be a constant due to line 13-17
 2019-05-30 18:15:15 +09:30
curben 69d7aabe63 feat: add Google Webmaster 
exclude the verification file from sitemap.xml
 2019-05-30 18:04:31 +09:30
curben d79e42d960 feat: add Content-Language to HTTP header 
https://www.w3.org/International/questions/qa-http-and-lang
https://www.w3.org/International/questions/qa-text-processing-vs-metadata
 2019-05-27 11:58:48 +09:30
curben 5def92d738 feat: add robots.txt 2019-05-27 11:58:48 +09:30
curben eb2a009ac0 feat: add sitemap.xml 
https://github.com/hexojs/hexo-generator-sitemap
 2019-05-27 11:58:48 +09:30
curben 0df867fc1a Merge branch 'headers' into 'master' 
refactor: unify HTTP header settings into _headers

See merge request curben/blog!20
 2019-05-26 05:56:37 +00:00
curben 00fbcce468 refactor: unify HTTP header settings into _headers 2019-05-26 15:09:27 +09:30
curben ab67e05c73 docs(readme): consistent badge colour 2019-05-26 11:39:03 +09:30
curben 415952ff69 docs(open_graph): add comment 2019-05-26 00:10:44 +09:30
curben cab3baeaf8 style: standardjs lint 2019-05-25 23:58:52 +09:30
curben 7ebcc03977 fix(open_graph): use data-src attribute in img tag 
* compatibility with cloudinary (see scripts/cloudinary.js)
  * helper has to be registered via a function
    - https://github.com/hexojs/hexo/issues/1462#issuecomment-277474592
    - https://github.com/hexojs/hexo/issues/743#issuecomment-168262852
    - https://hexo.io/api/helper
    - https://github.com/hexojs/hexo/blob/master/lib/plugins/helper/open_graph.js
 2019-05-25 22:21:44 +09:30
curben 9daf4d98b9 docs(copy-button): clarify the source of cheerio package 2019-05-25 22:20:54 +09:30
curben cf16dd3e43 refactor: move creation of 'Copy' button from client to server 
* https://github.com/cheeriojs/cheerio#append-content-content--
  * cheerio doesn't have .createElement() function
    - https://code.tutsplus.com/tutorials/jquery-14-released-the-15-new-features-you-must-know--net-8590
 2019-05-25 20:14:02 +09:30
curben 3dfc57dbbe refactor: replace for loop with forEach() 
https://stackoverflow.com/a/34832466/9645167
 2019-05-25 17:49:36 +09:30
curben 3b4172119b docs(post): Add 'Cloudflare in Firefox is not the end of the world' post 2019-05-25 17:26:49 +09:30
curben b5a86372c2 fix: add DoH tag 2019-05-25 17:26:20 +09:30
curben 2000d449c6 feat: add more alt attributes 
* fix grammar, clarify
 2019-05-24 14:56:08 +09:30
curben 809e3e05ab feat: add more alt attributes 2019-05-23 17:04:56 +09:30
curben e312ed2b69 feat: add alt attribute to <img> 
* https://support.google.com/webmasters/answer/114016?hl=en
  * remove version tag from cloudinary link
    * cache of previous version should be purged by now
  * img tag doesn't need to be self-closing
 2019-05-23 16:46:02 +09:30
curben 15048c2d1f fix: search.svg does not load in Firefox due to CSP 
* Use default-src 'self' as a workaround
https://pokeinthe.io/2016/04/09/black-icons-with-svg-and-csp/
https://bugzilla.mozilla.org/show_bug.cgi?id=1303364
https://github.com/w3c/webappsec-csp/issues/199
https://github.com/w3c/webappsec-csp/issues/198

* use 'self' instead of localhost and netlify.com
* set other directives to 'none'
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
* font-src neeeds to be whitelisted before using fork-awesome
 2019-05-22 12:39:53 +09:30
curben 4791c98a00 refactor: remove jquery and fancybox 
todo https://github.com/dimsemenov/photoswipe
 2019-05-22 11:13:21 +09:30
curben 08fb7897e1 fix: replace 'https' with 'https:' in CSP 
https://content-security-policy.com/#source_list
 2019-05-22 11:00:00 +09:30
curben 0e686c620b refactor: Use pure JS equivalent of jQuery's $.ready() 
https://stackoverflow.com/a/9899701
 2019-05-22 10:52:58 +09:30
curben 821ac056b7 feat: add CSP via <meta> tag 
* <meta> doesn't support frame-ancestors directive
  * '*--curben.netlify.com' is invalid
  * add localhost
  * block-all-mixed-content works with localhost
 2019-05-21 14:41:56 +09:30
curben 03c527b2f5 refactor: move inline search function to js file 
avoid inline script for CSP
 2019-05-21 14:12:30 +09:30
curben 0b2c5dbc6c fix: don't remove ID from svg 
necessary for <use> tag
https://gitlab.com/curben/blog/blob/master/themes/typing/source/svg/search.svg
https://css-tricks.com/svg-use-external-source/
 2019-05-21 13:41:29 +09:30
curben 045882e527 feat: add tooltip to search button 
https://developer.mozilla.org/en-US/docs/Web/SVG/Element/title
https://developer.mozilla.org/en-US/docs/Web/SVG/Element/desc

inline svg doesn't require xmlns attribute
https://github.com/svg/svgo/blob/master/plugins/removeXMLNS.js
 2019-05-21 13:37:10 +09:30
curben bc4082ac06 refactor: use image file instead of inline 2019-05-21 13:10:40 +09:30
curben 2ac754fa4d style: arrow function 
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Functions/Arrow_functions
 2019-05-21 11:22:01 +09:30
curben e7a6071d08 refactor: move inline cloudinary js into js file 
to make way for CSR policy
 2019-05-21 10:49:30 +09:30
curben 47e7982432 refactor: use image file instead of inline 
page source looks cleaner this way
 2019-05-21 10:12:35 +09:30
curben 958d8f8c8e Merge branch 'http-header' into 'master' 
feat: harden HTTP headers

See merge request curben/blog!18
 2019-05-20 02:27:24 +00:00
curben 3954d3891e fix: follow netlify's hsts max-age 2019-05-20 11:52:05 +09:30
curben 98be37f77a feat: harden HTTP headers 2019-05-20 11:15:27 +09:30
curben ba48027e74 refactor: switch to regular cloudinary js 
* it's hosted at cdnjs, inline with other js source
    - better for HTTP/2 multiplexing if same host
  * update jquery
 2019-05-19 12:07:34 +09:30
curben 5b9d9494e6 fix: date and time display 
* Add starting year to copyright
  * Remove unneeded creation time from posts
 2019-05-19 11:35:03 +09:30
curben 038645e497 fix: update title 2019-05-19 11:22:39 +09:30
curben 5323544fd8 docs: update nodejs installation instruction 
* in readme, add instruction to install more updated nodejs
	* in readme, add a link to the relevant post for more detailed instruction
	* in posts, append 'or newer' to fedora, now that fedora v30 is released
	* in posts, add '--only=prod' parameter to skip devDeps
 2019-05-18 14:53:43 +09:30
curben e5440eff3d docs: skip installation of devDep 2019-05-13 16:13:50 +09:30
curben 581c41fef0 docs: fix links in badge 2019-05-13 15:55:02 +09:30