DEV.to Reviews

1. jorge

   · CEO at Escuela de Formación Técnica Chile SPA · about 6 years ago
   It is a nice mini-blog, it's for free and such but

   As a mini-blog, it is a nice alternative for Medium to publish and share information about programming.

   However, the community and the organization are biased toward social justice (and they are open to it). You can read its Code of Conduct, it is so vague and politically leads (I prefer a term of service because it defines fair rules for everybody). So it alienates developers that we don't care about politics in pro of people that want to talk about any other topic such as sexuality, how women are unprivileged, and such. It even mandates to use inclusive language. Good grief.

   My main complaint is the quality of the community. It is not StackOverflow (so we don't want to ask for an answer here), and most of the top topics are clickbait, such as "how to become a rockstar developer in ... days", "100 tips to become a better programmer" (and it doesn't even talk about programming).

   Technically this "mini blog" site allows us to use markdown, and it is okay. However, the whole experience is really basic. Even the template is ugly.

   🏁 Competitors: Medium

   👍 Pros:    Free

   👎 Cons:    Social justice|Basic features|Quality of content

Security Headers Reviews

DEV.to mentions (648)

• JavaScript still can't ship a full-stack module

  While developing Wasp, a JS full-stack framework, we keep researching other ecosystems (Rails, Laravel, Django, etc.) and finding ways how they figured out developer productivity. We kept finding these reusable legos, so we gave them a name: "full-stack modules". Let's define what we mean by that exactly. - Source: dev.to / 4 days ago

• What We're Seeing After 8,000 SEO Audits

  If you want to see where your site sits in this distribution, run an audit — it takes about 12 seconds. - Source: dev.to / 8 days ago

• How to Get Your First Tool Online

  Getting a first thing online is a milestone worth not reaching alone. A MLH hackathon is the perfect place to try: build, break, and deploy alongside other people over a weekend. And DEV is always here for the other parts, open all the time, where a new coder can post the project, ask for feedback, and read how someone else cleared the same hurdle. - Source: dev.to / 9 days ago

• AI slop and the content treadmill every developer is on

  Same idea. Four rewrites. Four character budgets. Four hashtag policies. Four mental models of an algorithm I do not control and cannot see. And that is before you reach Mastodon, Threads, Reddit, a newsletter, dev.to, and whatever launched this quarter. - Source: dev.to / 11 days ago

• Docker Networking Explained: Bridge, Host, Overlay, and DNS

  Visualizing how Docker Compose services connect to each other — which services share networks and which are isolated — helps catch misconfigured networking before deploying. InfraSketch parses Docker Compose files and maps services and their network relationships as a diagram. - Source: dev.to / 13 days ago

Security Headers mentions (69)

• The Security Checklist Every Vibe Coder Needs Before Launch

  Check: Go to securityheaders.com and enter your URL. A grade below B means you're missing important ones. - Source: dev.to / 12 days ago

• Four HTTP security headers every WordPress site should set

  The curl above is the fastest check; all four lines should come back. In a browser, DevTools, Network tab, click the document request, read Response Headers. For a letter grade, securityheaders.com scores you against a known rubric. One quirk: these four alone land a B, and you reach A only once you add Content-Security-Policy. - Source: dev.to / about 1 month ago

• Manual Web Content Discovery: How You Can Find Hidden Paths Before Attackers Do

  Remediation: Configure your web server to suppress or mask the Server header. Add security headers like Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, and X-Content-Type-Options. You can use tools like securityheaders.com to check your current header posture. - Source: dev.to / 2 months ago

• The LiteLLM Attack Exposed a Bigger Problem: Your Vibe-Coded App Probably Has the Same Vulnerabilities

  Step 4: Check your security headers (2 minutes) Visit securityheaders.com and enter your deployed URL. If you get anything below a B, you're missing critical protections. - Source: dev.to / 3 months ago

• 5 things your website is getting wrong (and how to check for free)

  How to check: Run curl -I https://yourdomain.com and scan the response headers. Or paste your URL into securityheaders.com for a free graded report. - Source: dev.to / 3 months ago