Steffen Gransow graste

Get WGS84-GeoJSON from WFS with Soldner-Coordinates

The problem: get GeoJSON data from a WFS that uses a projection other than WGS84. This is e.g. true for all geo data in Berlin's FIS-Broker GIS. The data there uses the "Soldner" projection (or EPSG:25833).

Download as XML

You need to know the URL of the WFS you want to get the data from.
Consider Baumbestand Berlin - Straßenbäume - Sachdaten zur Karte - [WFS]:
The URL is https://fbinter.stadt-berlin.de/fb/wfs/data/senstadt/s_wfs_baumbestand.
The last bit of the URL is also the name of the layer: s_wfs_baumbestand.

rechtliches

WCAG

WCAG 2.1 auf Deutsch
Es gibt mittlerweile auch schon die WCAG 2.2
Wirkt sich die WCAG 2.2 aus?
A Roundup Of WCAG 2.2 Explainers
WCAG Cheat Sheets and Checklists

CSS 2024 Reading List

lvh / lvw / lvmin / lvmax, sv, dv, etc.

The CSS data type represents a distance value. Lengths can be used in numerous CSS properties, such as width, height, margin, padding, border-width, font-size, and text-shadow.

https://developer.mozilla.org/en-US/docs/Web/CSS/length
The large, small, and dynamic viewport units https://web.dev/viewport-units/ (web.dev)

Anchor Positioning

Future CSS: Anchor Positioning (kizu.dev)

author: @sleepyfox
title: Fox's laws of software development
date: 27 October 2021
preamble: A not entirely serious treatise on the immutable fundamental laws of software development activities

Fox's laws of software development

A not entirely serious treatise

Raspberry Pi Zero OTG Mode

Simple guide for setting up OTG modes on the Raspberry Pi Zero - By Andrew Mulholland (gbaman).

The Raspberry Pi Zero (and model A and A+) support USB On The Go, given the processor is connected directly to the USB port, unlike on the B, B+ or Pi 2 B, which goes via a USB hub.
Because of this, if setup to, the Pi can act as a USB slave instead, providing virtual serial (a terminal), virtual ethernet, virtual mass storage device (pendrive) or even other virtual devices like HID, MIDI, or act as a virtual webcam!
It is important to note that, although the model A and A+ can support being a USB slave, they are missing the ID pin (is tied to ground internally) so are unable to dynamically switch between USB master/slave mode. As such, they default to USB master mode. There is no easy way to change this right now.
It is also important to note, that a USB to UART serial adapter is not needed for any of these guides, as may be documented elsewhere across the int

TL;DR

I found 1 browser, 1 language, and 15 vulnerabilities in { Web Framework, HTTP Client library, Email library / Web Service, etc }
All the vulnerabilities I found were found from a single perspective (I investigated maybe 50-80 products).
The RFC description of the problem (rather confusingly) describes the requirements for this problem, while the WHATWG > HTML Spec is well documented.
The problem is clearly targeted at the Content-Disposition fields filename and filename*.
This problem affects HTTP Request/Response/Email in different ways.
- HTTP Request : request tampering (especially with file contents, tainting of other fields, etc.)
- HTTP Response : Reflect File Download vulnerability

Email : Attachment tampering (e.g., extension and filename tampering and potential file content tampering)

What forces layout / reflow

All of the below properties or methods, when requested/called in JavaScript, will trigger the browser to synchronously calculate the style and layout*. This is also called reflow or layout thrashing, and is common performance bottleneck.

Generally, all APIs that synchronously provide layout metrics will trigger forced reflow / layout. Read on for additional cases and details.

Element APIs

Getting box metrics

elem.offsetLeft, elem.offsetTop, elem.offsetWidth, elem.offsetHeight, elem.offsetParent

	*,
	::after,
	::before {
	box-sizing: border-box;
	}

	html {
	font-size: 16px;
	}

	:root {
	--linear-in: linear(0, 1);
	--linear-out: linear(0, 1);
	--linear-in-out: linear(0, 1);
	--power0-in: linear(0, 1);
	--power0-out: linear(0, 1);
	--power0-in-out: linear(0, 1);
	--quad-in: linear( 0, 0.0039, 0.0156, 0.0352, 0.0625, 0.0977, 0.1407, 0.1914, 0.2499, 0.3164, 0.3906 62.5%, 0.5625, 0.7656, 1 );
	--quad-out: linear( 0, 0.2342, 0.4374, 0.6093 37.49%, 0.6835, 0.7499, 0.8086, 0.8593, 0.9023, 0.9375, 0.9648, 0.9844, 0.9961, 1 );
	--quad-in-out: linear( 0, 0.0027, 0.0106 7.29%, 0.0425, 0.0957, 0.1701 29.16%, 0.2477, 0.3401 41.23%, 0.5982 55.18%, 0.7044 61.56%, 0.7987, 0.875 75%, 0.9297, 0.9687, 0.9922, 1 );

	# Define ULID_DECODE and ULID_ENCODE which convert a ulid string to a binary and vice versa.

	delimiter //
	DROP FUNCTION IF EXISTS ULID_DECODE//
	CREATE FUNCTION ULID_DECODE (s CHAR(26)) RETURNS BINARY(16) DETERMINISTIC
	BEGIN
	DECLARE s_base32 CHAR(26);
	SET s_base32 = REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(UPPER(s), 'J', 'I'), 'K', 'J'), 'M', 'K'), 'N', 'L'), 'P', 'M'), 'Q', 'N'), 'R', 'O'), 'S', 'P'), 'T', 'Q'), 'V', 'R'), 'W', 'S'), 'X', 'T'), 'Y', 'U'), 'Z', 'V');
	RETURN UNHEX(CONCAT(LPAD(CONV(SUBSTRING(s_base32, 1, 2), 32, 16), 2, '0'), LPAD(CONV(SUBSTRING(s_base32, 3, 12), 32, 16), 15, '0'), LPAD(CONV(SUBSTRING(s_base32, 15, 12), 32, 16), 15, '0')));
	END//