A website with no admin login
WordPress and other server-built sites run code on every visit and have a login page anyone can find. A static site built from Markdown has neither.
Blog
Notes on editing websites safely, and what's new in Orbit MD. RSS feed
The attack surface of a static site built from Markdown in git
One October PHP exploit ran before any application code. A static site has nothing for that bug to reach, but its build and git host still need securing.
Orbit MD 1.1.1: tidier editing
Orbit MD 1.1.1 splits each page into Details and Text tabs and shows lists to suit what they hold, with tags as chips, photos as a gallery and FAQs as cards.
Orbit MD 1.1.1 for developers: lists from schemas
How Orbit MD 1.1.1 picks a control for each list from the schema or the data, keeps inferred fields in written order, and decides when a page needs a Text tab.
Orbit MD 1.1: sign in with GitHub
Orbit MD 1.1 opens private GitHub sites with a GitHub sign-in, lists every site you can edit, and takes each person's role from their GitHub access.
Orbit MD 1.1 for developers: GitHub sign-in
Orbit MD 1.1 signs in through a GitHub App's device flow, gives the token to git without touching config or URLs, and reads roles from repository permissions.
Orbit MD 1.0
The first release of Orbit MD, a Mac app for editing the pages, posts and data of static sites built from Markdown, with publishing by page and approval.
Orbit MD 1.0 for developers
How Orbit MD 1.0 reads a site's content schema without Node, keeps frontmatter diffs small, and maps publishing by page onto branches and branch protection.