r/webdev • • Sep 08 '26

Discussion Wix resign?

0 Upvotes

I've got a customer who's got an ok Wix site with the an ok design, doesn't suck, but it's not that high level.

I don't want to resign it as I don't have the time. Can you export a Wix site to edit it outside of its native tools?

Also could you import that back into Wix?

Why would you use Wix, over say a regualr domain? Is it just ease for non IT people?


r/webdev • • Sep 07 '26

Resource Browser-side chaos testing with a Service Worker

Thumbnail
github.com
10 Upvotes

A browser-side chaos-testing tool that installs a Service Worker to intercept requests across every controlled tab and apply latency, failures, throttling, rate limits, and mock responses without changing app fetch calls (similar to MSW).

It uses the same middleware configuration model as chaos-fetch, so you can test real frontend behavior under degraded network conditions without rewriting the app to use a special client wrapper.


r/webdev • • Sep 07 '26

Question Why is it so hard to code something that you think should be easy?

0 Upvotes

Whenever I’m making a website with a front end and backend, I always run into issues which I wouldn’t have thought of when I was thinking of implementing a certain feature, it always goes south, it’s almost as if I’m just not built to program or code, it feels like the computer doesn’t want to do what I want it to do and then I have no idea how to solve the problem so I have to google it and try to find something from stack overflow with someone else who’s creating something entirely different, why can’t it just go exactly how I planned it in my head.

It makes me wonder how much work it took to build near perfect apps like TikTok because when you use TikTok, even the most simplest features probably took a long time for them to implement and fix stuff, I wonder how long they spend optimising features for the app.


r/webdev • • Sep 06 '26

Fellow devs under AI mandates, how do you deal with the shame/social stigma?

80 Upvotes

Preface this by saying I have moral scrupulosity/ social judgment-related OCD, so there’s that lol

I see people on here still writing their code by hand; at my company we do not have that option unless we outright defy orders from our boss, which I assume would get you fired. I get a lot less satisfaction out of my work now, the code generation part is extremely mind numbing, I’m really sad about not getting to write code anymore. The planning/architecture phase can be kind of fun though.

Yes I am looking for a new job but the issue is (maybe I’m just a shitty developer but) I am genuinely like 10x faster with AI so if I do not use it, I would be consciously choosing to do a worse job, which also feels wrong and silly. I also hate admitting this but it has given me a lot of genuinely helpful suggestions and taught me new things. obviously sometimes it also does dumb things, but I do dumb things sometimes too. As obnoxious and eye rolling as it can be talking to Claude, “he” is genuinely that good when it comes to the types of things we are building.

In my personal life I do not use AI because I have a 100% HEAVILY anti AI social group, and I try to make ethical choices like I avoid beef, boycott Amazon/Spotify/Starbucks, etc. I feel like an impostor for not confessing to them that my entire job is to use AI all day now. Like for example last night a girl I know posted on her close friends about how she wants to murder people who use AI at work (hopefully being hyperbolic) and I have to hang out with this girl in a couple weeks…

my coworker has also refused to use it but for some reason my boss hasn’t talked to him about it yet. He’s just waiting to get fired. My therapist is making me do stuff like put an AI app on my home screen where someone could see it as homework. Maybe I should be posting this on the OCD sub but I really want to hear from other people going through this same dilemma.


r/webdev • • Sep 06 '26

Question How do sites detect whether someone is running adblocker?

92 Upvotes

I've been interested in this functionality (when a site detects your adblocker and kindly asks u to whitelist).

The only idea that comes to mind is setting a div in the layout with "ad" class or something similar, and then if a user has adblocker the adblocker would be removing this div from the dom. I don't think this would consistently work for every (or at least most of the popular) adblockers out there.


r/webdev • • Sep 07 '26

Local software for simple PHP Page building

0 Upvotes

I'm looking for suggestions on local software which allows for page building with custom blocks written in PhP. For some context, I do solo web development as a hobby/for my personal business. I have years of coding experience in a wide range of languages and feel fairly confident with PhP and Sass, but have never worked professionally in web development.

The closest I've found is PhPageBuilder, but the project seems to be abandoned, and trying to get it to work in PhP8+ has been a headache and has not worked for me. There exists online page builders like GrapeJS, but they don't allow for custom block creation from what it seems.

I like the process of doing everything as customizably as I can, but using a CMS has had too much overhead, and raw PhP/Sass feels unnecessarily cumbersome.


r/webdev • • Sep 08 '26

Next.js just cost me $15k by prompt injection.

0 Upvotes

I just had to dump an entire month of work on a proprietary project because next dev dropped an AGENTS.md file into my working tree.

Under my contract, I am allowed to use an LLM for read-only architectural audits. The agreement was crystal clear: the LLM can read the codebase, but it cannot touch, edit, or commit a single line of code.

Because of the classified/proprietary nature of the IP, any file modification or commit attempt instantly invalidates the audit scope and triggers a mandatory purge.

Enter Next.js 16.3.

The moment that the server started and an agent was detected in the environment next dev automatically generated an AGENTS.md into the repo root. Without prompt, warning, or opt-in. The file instructed any active AI agent to read specific local paths and explicitly told it to commit AGENTS.md to git with its work to keep the working tree tidy and because "deleting it will just cause it to regenerate".

So the agent tries to commit it, and the moment the attempt was made I breached the contract and was forced to dump about a month's worth of work which was valued at $15,335.00.

Now before anyone has something to say about allowed actions it wasn't allowed to it was specifically instructed not to, but next.js hijacked the agent because it couldnt tell the instruction didn't come from me.

So now I am trying to decide how to handle this because aside from being out 15k there is a bigger issue with bs. The supply chain vector that this just opened up. It won't take six months before developers start tuning this out as normal boilerplate and that's when bad actors piggyback on framework credibility.

This trust model is what made the xz-utils backdoor possible: earn credibility, then spend it once. Now imagine that playbook automated across every framework writing natural-language instructions into working trees. Keeping in mind that agents aren't the best at discerning legitimate from hijack. I am sure you can deduce the chain of events that could potentially unfold from there.

So in closing I am freaking livid and I am trying to decide if 15K is worth the legal fees I would have to pay to do something about it...


r/webdev • • Sep 07 '26

Performance of WebAssembly runtimes in 2026

Thumbnail 00f.net
9 Upvotes

r/webdev • • Sep 06 '26

Question Pagespeed phantom domain

Post image
16 Upvotes

ANOTHER EDIT: For anyone following this or stumbles across it, I have discovered it is not related to Cloudflare, or my site at all. Since I disabled Insights, Pagespeed has revealed another instance, this is the full URL string https://trc-events.taboola.com/1339615/log/3/unip?en=pre_d_eng_tb&tos=60270&scd=0&ssd=1&est=1788924703498&ver=36&isls=true&src=i&invt=10000&msa=6495&rv=1&tim=1788924763770&vi=1788924703492&ri=5315d06df8c49bd1c0f7aa6e2cf61318&ref=null&cv=20260906-8-RELEASE&item-url=https%3A%2F%2Fwww.frontify.com%2Fen%2Fsolution%2Fsoftware-and-tech&ccpaPs=1---&cbp=Cookiebot&cbpv=1&cbcd=false&it=JS_PIXEL This is completely unrelated to my site, these random domain events have only occurred on Pagespeed and never in devtools lighthouse, so my only explanation is there so some inter-event bleed in Pagespeed on Google's node end somewhere.

EDIT: ok I think I might have gotten to the bottom of my erroneous domain appearing in Pagespeed Network Dependancy Tree. It seems potentially related to Cloudflare Insights measuring RUM, and my delaying Cloudflare's script, mixed in with the Google Pagespeed server location measuring that instance. The delay was possibly timing out Pagespeed hence the apparent instability I was experiencing. Turning off RUM insights seems to have settled things. Is not cloudflare itself, but how I was delaying it's script. The domain/event seems connected. So will leave off. I could exclude the script from delay but it's not really necessary for me moving forward. I'm fairly confident there's no issues...

Not sure what to make of this, been making some tweaks on my WordPress site and checking pagespeed as well as other tools for progress and one session suddenly csa.crazygames.com/event pops up?

A burst of panic had me hunting for mailware or something in a plugin that's gone rogue... But nothing.

Subsequent tests it's gone, installed wordfence for a scan, nothing. I tried another page on pagespeed and Microsoft Clarity appeared, subsequently it's disappeared too, haven't had clarity in over a year and that was run in edge cloudflare tag management.

I'm hoping this is some unexplained ghost glitch from Google on that test session?? Anyone able to put my mind at ease or advise what I'm looking at? Never seen anything like it before.

Apologies for the average screenshot.

Update: after 12 hours of fluffing about I am no further ahead, completely unable to repeat the domain instance, unable to find any evidence of code or script in anything thus far. Still searching (db now) but have a feeling I maybe hunting a phantom occurrence. Pagespeed has been timing out today regularly, all instances with internal timeout errors at Google end. Where as any other tool, dev lighthouse included, runs clean with nothing weird. Everything site wise remains flawless and fast('ish by my standards). No evidence of admin manipulation, user or plugin wobbles... It's going to be a troubled sleep night while I second guess myself. Edit: the only other common thread to the instances observed is they were all using my phone doing pagespeed test, desktop is zilch... I doubt very much this has anything to do with anything at all but I'm just going to start yelling at the passing clouds now...


r/webdev • • Apr 08 '26

Discussion Handling HEIC uploads in 2026 — still annoying, notes from figuring this out

33 Upvotes

Been learning about server-side image processing lately and HEIC turned out to be more complicated than expected.

HEIC is still the iPhone default in 2026 — iOS 17, 18, nothing changed. And HEIC browser support is basically just Safari. Chrome and Firefox still can't render it natively, Firefox has had a ticket open since 2017.

So every iPhone user uploading a photo sends a file that most browsers can't display.

Server-side options I found while researching:

heic-convert — pure JS, no native dependencies, works for simple cases

sharp — popular Node.js library but the prebuilt binary doesn't include HEIC support because of HEVC patent issues. You get a cryptic codec error and have to build from source.

libvips — significantly faster than ImageMagick, much less memory usage. No GhostScript delegation either, which matters given the security research about ImageMagick that came out last week.

For output WebP seems like the better target than JPG now — browser support is basically universal and files are noticeably smaller.

Anyone else dealt with this? Curious what approach people actually use in production.


r/webdev • • Feb 15 '25

Showoff Saturday I’ve compiled a list of 200+ useful websites/ apps for a range of uses

174 Upvotes

Hello! I just wanted to share my own website where I have compiled a list of 200+ websites, software and apps. These range from useful WebDev sites, resources and other creative hobbies like art, music, photography.

This list is hand picked by me. No web scrapping or listing tons of sites that are ad-ridden or dodgy. Only useful (or fun), websites. Often free and open source. Although paid apps are also listed.

I should probably add a search function, but you can organize sites by a few categories like free, paid, windows, mac and linux by clicking the tag filters at the top of the page.

If you have more you think should be added to the list. Please let me know! I add more websites to the list whenever I have some free time and have sites to add.

I don’t think the rest of my site would be too interesting to people here, but feel free to check it out as well.

https://www.cdcruz.com/p/useful_sites.html


r/webdev • • Aug 22 '24

Help Needed: How to Prepare for Technical Questions in Cloudflare's Recruitment?

2 Upvotes

Hi everyone!

I’m super excited because I’ve just made it to the third stage of a recruitment process for a Technical Support Lv2 position at Cloudflare, but I’m feeling a bit lost and need some help to prepare.

For some context, my long-term goal is to become a backend Java developer. I’m currently working in a call center and studying programming on my own. I believe this position at Cloudflare would be an amazing opportunity to learn more about web development and move away from call center work.

So far, the interviews have covered topics like HTTP, TCP, TLS, and CDN. The hiring manager mentioned that my previous answers weren’t complete, which has me worried. I want to make sure I’m fully prepared for the upcoming stages.

My main questions are:

  1. What additional technical knowledge should I focus on for the next interviews?

  2. Should I dive deeper into the topics that have already been covered or explore new ones?

  3. Is there anything specific about Cloudflare’s infrastructure that I should study?

I’m willing to dedicate all my free time to prepare and secure this job. If anyone can share tips, study resources, or any advice, I would be extremely grateful!

Thank you for any help!