canvas.toBlob() silently falls back to PNG when requested format is unsupported

·1 views

A developer building a client-side image converter discovered that the browser's canvas.toBlob() API does not throw an error when it cannot encode a requested format such as WebP or AVIF. Instead, it silently returns a valid PNG file while calling the callback as if the operation succeeded. This behavior is not a bug but is documented specification, meaning users can unknowingly download a larger PNG file believing they received modern compressed output. The only way to detect the silent fallback is to manually compare the returned blob's MIME type against the originally requested format. Developers can guard against this by throwing an explicit error when the types do not match, allowing the application to surface a meaningful message to the user.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Python Tool Lets Crypto Users Scan and Revoke Risky ERC-20 Token Approvals

Every DeFi interaction on platforms like Uniswap requires users to grant ERC-20 token allowances, which permit smart contracts to spend wallet funds — often in unlimited amounts. Over time, these accumulated approvals create a security vulnerability, as a compromised contract with an active allowance can drain a wallet without requiring the owner's private key. A developer tutorial published on DEV Community walks through building an automated allowance scanner using Python and the Web3.py library. The tool queries Etherscan's API to retrieve all past approval events for a given wallet address, then classifies each by risk level based on factors like unlimited spend limits or unverified spender contracts. It also generates ready-to-sign revocation transactions that set allowances back to zero, helping users regain control of their on-chain permissions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS Student Builder Group Hosts Three-Day DEV WEEKEND at QAU Islamabad

The AWS Student Builder Group at Quaid-i-Azam University Islamabad organised a three-day event called DEV WEEKEND. The event featured sessions on tech career paths in data, led by Taskeen Fatima from DataCamp, as well as a hands-on Amazon Bedrock workshop. A Junior Network Engineer at FiberX Digital attended the event, noting that live application of concepts from the Bedrock session helped reinforce prior mentorship learning. The attendee is also independently developing NexaLink, an ISP management SaaS product, while transitioning from networking into cloud and AI. The event was coordinated by Ali Mumtaz and the AWS SBG QAU team.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Next.js Streaming and Suspense Eliminate Blank-Screen Waits in SSR Apps

Traditional server-side rendering forces browsers to wait until all data is fetched before displaying any content, causing slow components to block the entire page. Next.js App Router addresses this by combining React Suspense with HTML streaming, allowing fast UI sections to render immediately while slower data fetches continue in the background. Developers isolate slow components as independent async Server Components and wrap them in Suspense boundaries with lightweight skeleton fallbacks. This approach significantly improves Time To First Byte and First Contentful Paint, making applications feel more responsive to users. The technique effectively decouples slow backend queries from the overall frontend rendering pipeline.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CQRS Pattern in Laravel Separates Read and Write Logic for Better Scaling

As Laravel applications grow in complexity, controllers tend to become bloated by mixing data mutation and data retrieval logic in the same flow. CQRS, or Command Query Responsibility Segregation, is an architectural pattern that strictly separates write operations (Commands) from read operations (Queries). In practice, Commands handle state changes through transactional database writes, while Queries fetch data independently using optimized raw SQL or read replicas. This separation allows teams to scale read and write databases independently and improves overall endpoint performance. Adopting CQRS also makes codebases more modular and testable, and lays groundwork for advanced patterns like Event Sourcing and microservices.

0 comments Read more at DEV Community