.tip

Feb 26, 2026 · one of the small things

blame with -w -C to see through reformatting

A formatter run makes the formatter's commit the author of every line. -w ignores whitespace, -C follows lines that moved from another file.

git blame -w -C -C -C src/checkout.ts

Add the big reformatting commits to a .git-blame-ignore-revs file and set blame.ignoreRevsFile, and GitHub's blame view skips them too.

git

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close