.tip

Apr 25, 2026 · one of the small things

fail-fast: false when the matrix entries are independent

By default one failing matrix job cancels the rest. That hides whether the failure is Node 22 only or everything, and you rerun to find out.

strategy:
  fail-fast: false
  matrix:
    node: [22, 24]

Let them all finish. The extra minutes are cheaper than the second run.

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close