Blog

React has a reputation for being "safe from XSS," and it's partly earned. Every string you render in JSX is escaped, so a comment containing a script

Most JWT tutorials end with localStorage.setItem("token", jwt) and an Authorization header on every request. It works on day one. Then the token

Rendering ten thousand rows at once is slow to download, slow to render, and useless to the person looking at it. Every list that can grow needs some

A search box that calls the API on every keystroke looks fine in a demo and falls apart in production. Typing "wireless headphones" fires nineteen re

A dashboard that only refreshes when the user reloads the page feels broken the moment two people use it at once. One person moves a ticket to "Done,

Infinite scroll looks simple: when the user nears the bottom of the list, load more. The first version usually listens to the scroll event, compare