Web Security Basics
Listed inWeb Security BasicsWeb Securityon
The same-origin policy, XSS, CSRF, and clickjacking — the threat model everything else refines.
Intermediate9 minDraft
#security
#fundamentals
Page 4 of 12
Listed inWeb Security BasicsWeb Securityon
The same-origin policy, XSS, CSRF, and clickjacking — the threat model everything else refines.
Listed inSession ReplayExperimentation and Analyticson
Watching a real interaction end to end, and the masking rules that keep it lawful.
Listed inGeminiBuilding AI Featureson
Google’s API, its multimodal inputs, and the long-context behaviour to design around.
Listed inpnpmPackage Managerson
Content-addressed storage and a strict node_modules layout that surfaces undeclared dependencies.
Listed inSWCBuild Toolson
A Rust transpiler used as the Babel replacement inside several frameworks and test runners.
Listed inOffline FirstProgressive Web Appson
Designing for an unreliable network: local writes, sync queues, and conflict resolution.
Listed inAI-Assisted CodingAI-Assisted Developmenton
Where an assistant reliably helps in a frontend codebase, and where it quietly costs you time.
Listed inAsynchronous JavaScriptJavaScripton
Promises, async/await, concurrency with `Promise.all`, and the error paths people forget until production.
Listed inAtomsState Managementon
Bottom-up state built from small independent units that compose into derived values.
Listed inInternationalization BasicsInternationalizationon
Externalising strings, negotiating a locale, and noticing the assumptions English quietly hides.
Listed inHTML TemplatesWeb Componentson
Inert markup with `<template>` and `<slot>`, cloned on demand rather than parsed as strings.
Listed inFlutterMobile and Desktop Appson
Dart and a self-rendering widget layer — consistent everywhere, at the cost of leaving the JS ecosystem.
Listed inLearn the BasicsHTMLon
Elements, attributes, nesting rules, and the document structure the browser builds its tree from.
Listed inSveltePick a Frameworkon
A compiler rather than a runtime: runes, derived state, and what disappears from the shipped bundle.
Listed inCSS TransitionsAnimation and Motionon
The cheapest motion available, and the handful of properties that animate without triggering layout.
Listed inVersioning and ReleasesMonorepos and Scaleon
Changesets, semver discipline, and changelogs somebody would actually read.
Listed inError TrackingObservabilityon
Capturing exceptions with enough context to reproduce, and grouping the noise into something triageable.
Listed inGitHub CopilotAI Coding Toolson
Inline completion, chat, and pull-request review inside the GitHub workflow.
Listed inObserver APIsWeb APIson
Intersection, Resize, and Mutation observers — event-free ways to react to layout and visibility.