How Common Is iframe Blocking? A Web Dev Debate Worth Knowing

·1 views

A research institute relaunching its website on a university-hosted TYPO3 CMS faces a technical dilemma over iframe integration. Custom web applications, including an interactive map and staff directory, can only be embedded via iframes due to university infrastructure constraints. A staff member raised concerns that a notable share of users may block iframes for privacy or security reasons, potentially making these features inaccessible. The institute's IT department disputes this, arguing that iframe blocking affects only a very small fraction of users and does not justify a costly redesign. The team is seeking data or real-world developer experience to determine whether iframe blocking is a practical concern worth addressing in public website architecture.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Telegram briefly pulled from App Store over CSAM, restored same day

Telegram was temporarily removed from Apple's App Store after child sexual abuse material was discovered within the app. Telegram responded by deleting the offending content and banning the responsible user, prompting Apple to restore the app on the same day. The incident sparked speculation on Reddit's r/openclaw community, where users initially feared Apple was cracking down on encrypted messaging apps. However, reporting from Reuters and 9to5Mac confirmed the removal was narrowly tied to the content violation, not a broader policy against encryption. The episode highlighted a practical concern for developers who rely on Telegram as a control interface for automated agents, underscoring the risk of depending on a single mobile channel.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

FFmpeg 9.0 Released With Native VVC Support, Rewritten Filter Engine, and API Overhaul

The FFmpeg team released version 9.0 in March 2026, marking the project's most substantial update in years after a 14-month development cycle involving over 2,300 commits from 180 contributors. The release introduces native decoding support for VVC (H.266), the successor to HEVC, which promises up to 50% bitrate reduction at equivalent quality without relying on external libraries. FFmpeg 9.0 also ships a rewritten filter execution engine that supports dynamic frame rate and format negotiation, while enabling GPU-accelerated filters to be chained without costly CPU round-trips. AV1 encoding sees up to a 12% compression efficiency improvement for high-motion content, and a new real-time streaming preset targets AVX-512 capable hardware. The major version bump reflects deliberate backwards-incompatible API changes, signalling a broader architectural modernisation of the widely used open-source multimedia processing toolkit.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Two-Layer Hashing Design Counts Anonymous Posts Without Tracking Devices

A developer has detailed a privacy-focused system designed to tally anonymous posts without identifying the devices that submitted them. The mechanism assigns each device a pseudonym using two rounds of hashing: the device applies SHA-256 to its locally stored UUID combined with a subject ID, while the server applies HMAC-SHA256 using a secret key it holds exclusively. This two-layer approach means the raw device identifier never leaves the device, and the server cannot reconstruct it even from the pseudonym it stores. The system uses pseudonyms solely to count distinct devices and determine whether a post threshold has been met for publication. The developer also documented an early bug where the threshold counted total posts instead of unique devices, along with the known limitations of the design.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Debugging Mindset, Not Coding Speed, Defines Great Software Engineers

A perspective piece from DEV Community argues that debugging — not writing new features — occupies the majority of a professional developer's working hours. The article contends that the key difference between novice and experienced engineers lies not in writing bug-free code, but in approaching problems methodically rather than reactively. Experienced developers are described as treating errors as investigative puzzles, relying on evidence such as logs, stack traces, and variable inspection rather than guesswork. Core debugging practices highlighted include consistently reproducing a bug before attempting any fix and reading error messages carefully instead of ignoring them. The piece concludes that cultivating a calm, curious debugging mindset may be the single most impactful step a developer can take toward professional growth.

0 comments Read more at DEV Community