VisualRefiner converts HEIC, images, and video entirely inside the browser

·1 views

A developer has built VisualRefiner, a file conversion tool that processes images and video entirely within the user's browser, requiring no server uploads or account creation. The tool handles HEIC-to-JPEG conversion, image compression, and format transcoding using the Canvas API, WebCodecs, and WebAssembly. Because the site is a fully static export with no backend, files never leave the user's device by design rather than by policy. HEIC files, which most browsers cannot natively decode, are handled via libheif compiled to WebAssembly and loaded only when needed to keep initial page load sizes small. Heavy dependencies like the 2 MB HEIC decoder are fetched on demand through dynamic imports, ensuring the homepage remains lightweight for users who may never use those features.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer builds 59 privacy-first browser tools in vanilla JS with zero dependencies

A developer has publicly launched Antigravity Tools, a collection of 59 free, browser-based utilities built entirely in vanilla JavaScript with no external dependencies, backend servers, or analytics. The project was motivated by privacy concerns with popular online tools, such as JWT decoders and regex testers, which can log user data on remote servers. All operations run locally in the browser using native APIs including Web Crypto, Canvas, Web Audio, and IndexedDB. The toolkit covers a wide range of developer needs, including JWT inspection, RSA key generation, JSON formatting, cURL conversion, regex testing, and AI prompt utilities. The tools are available for free at antigravitytools.app.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Six Design Controls for Reliable Localized Password Reset Email Delivery

A technical guide outlines six key controls for building secure, localized password reset email systems for media platforms. The approach centers on keeping HTML templates in versioned, application-owned source code rather than provider-hosted editors, ensuring preview and production emails use the same rendering path. Localization requires an explicit fallback chain with approved catalog revisions, and reset URLs must be generated by the application rather than embedded in translation files. A durable outbox with idempotency keys and expiry-aware retry limits ensures delivery evidence is preserved and expired links are not resent. The framework also mandates plain-text alternatives alongside HTML to cover all mail clients and avoid gaps in delivery coverage.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

5 Messaging Patterns That Keep Distributed Services Reliable at Scale

Modern distributed systems like food delivery platforms often rely on asynchronous messaging instead of direct service calls, making them more resilient to failures. Key patterns include message queues that hold requests when a receiver is down, and publish-subscribe topics that fan a single event out to multiple independent consumers. Competing consumers allow many workers to drain a shared queue simultaneously, enabling rapid scaling during traffic spikes. A dead-letter queue captures repeatedly failing messages so one corrupt entry cannot block the entire pipeline. Idempotent consumer design ensures that processing the same message more than once — a common occurrence due to network retries — produces no duplicate side effects such as double-charging a customer.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds open-source security scanner for MCP servers amid rising CVEs

A developer has released sentrymcp, an open-source security scanner for Model Context Protocol (MCP) servers, built in Rust and available under the MIT license. The tool was created after the developer found no purpose-built scanner existed, despite over 40 CVEs disclosed against MCP implementations this year. It performs static analysis to detect path traversal, command injection, missing authentication, and tool poisoning, while a runtime proxy mode monitors for 'rug pulls' — cases where a server silently alters a tool's description after user approval. Research from Endor Labs found that 82% of over 2,600 real MCP implementations use file operations prone to path traversal, and nearly 40% of scanned servers lack authentication entirely. The project can be run via a Docker one-liner, and its findings are ranked by severity with references to CWEs or the OWASP MCP Top 10.

0 comments Read more at DEV Community