SagaFlow Embeds Its Signed-In Story Game in itch.io, Fixing Four Framing Blockers

·3 views

Anton, founder of the browser story game SagaFlow, describes making one story page playable inside an itch.io game window. The web app had been built to refuse being framed, so the move exposed four separate problems. The embed is nested two frames deep, and browsers check frame-ancestors against every ancestor, so allowing only the direct parent is insufficient. Cloudflare Pages merges inherited headers, which meant the team had to explicitly remove X-Frame-Options and restate a full Content-Security-Policy for game routes. They also limited the allow-list to exact hosts rather than wildcards to avoid reopening clickjacking risks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Year-End Invoicing Checklist: Timing Tasks Before and After December

Year-end administration often falls behind because it collides with the busy December period, when clients slow down and leftover work piles up. The recommended approach is to sequence tasks: first pursue money that can still be collected before the year closes, then tidy records while there is time to locate missing items. Priorities include billing completed but unbilled work, ranking receivables by age, and separating disputed invoices from merely late ones. Afterward, the focus shifts to checking invoice numbering, storing every issued invoice as a consistently named file, verifying client details, and reconciling partial payments. The checklist is framed as deadlines relative to a business's own year-end, since requirements vary by jurisdiction and entity type.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Four Agency Billing Models and the Unbilled Work Most Firms Miss

Agency invoices must satisfy clients, procurement, and the agency's own cash flow, and most problems stem from unstated rules. The article outlines four billing approaches: retainers billed in advance or arrears, milestone or fixed fees, and time-and-materials. It stresses that each invoice should tie directly to a contract clause or an approved deliverable, with approval details recorded. Pass-through costs should be billed at cost on separate lines with supporting third-party invoices, and any markup agreed upfront. The piece also flags the unbilled work agencies often overlook, along with client-specific invoicing requirements that should be documented once and reused.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Messaging or Streaming on AWS: Choosing the Right Pattern for the Job

A software engineer reflects on using a messaging service for a continuous data flow, realizing streaming would have better matched the need. The article distinguishes the two patterns: messaging lets one part of an application send information without waiting for the receiver, while streaming keeps updates as retained records that consumers can read independently. Messaging covers work queues, where tasks are removed after processing, and publish/subscribe, which delivers the same update to several subscribers. Streaming suits real-time analytics, logs, and website activity, with examples including Amazon Kinesis Data Streams and Amazon MSK. The author advises starting from business needs rather than picking a service first, and illustrates with receipt generation via SQS and Lambda.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

WUUUH Logs Quiet Job-Search Weeks as Records Rather Than Verdicts

A peer community for people rebuilding after layoffs faced the problem of weeks with no employer response, which users often read as a sign their search had stalled. Its designers found that streak-based and raw-count activity systems punish rest and reward scattered applications. They replaced daily streaks with a weekly log that counts maintenance tasks like polite follow-ups, reviewing past reply patterns, and keeping small pieces of evidence current. Empty states were rewritten to describe a quiet week neutrally, and the feed was sorted by members' own activity rather than employer outcomes. Peer progress was shown alongside personal progress, and plain, specific prompts replaced cheerful nudges that had felt tone-deaf.

0 comments Read more at DEV Community