.tip

Jul 24, 2026 · one of the small things

A flaky test goes to quarantine the day it flakes

A test that fails one run in twenty teaches everyone to click retry, and then a real failure gets retried too. Move it out of the blocking suite the same day, with a ticket and an owner.

it.skip("…", …); // QUARANTINE: flaky since 2026-05-02, ENG-1840

Run the quarantine suite nightly so the fix can be verified. A quarantine older than a month is a test to delete.

testingengineering-practice

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close