1. Introduction Let’s be blunt: you cannot (and should not) render 1 million items directly into the DOM with React (or vanilla JavaScript) and expect it to run smoothly.The browser simply isn’t built for that kind of brute-force rendering. In this a...
I usually wake up around 8, or 8:30 if I stayed up too late coding the night before (which happens more often than it should). First thing I do is check my phone – not for messages, but to see if any PRs got comments overnight, or if someone in the t...
Goal: Optimize image before the first user accesses, reduce server load, reduce TTFB + increase LCP score ( better SEO ). Pre-generate image by script (sharp) Pre-generate image like as Vercel often do it. Example: // scripts/resize-images.ts im...
WSTG-INPV (Input Validation Testing), which is a section of the OWASP Web Security Testing Guide (WSTG). Input validation testing is a critical component of web application security testing that focuses on how applications handle user inputs. The OWA...
Testing Checklist WSTG-CONF - Configuration and Deploy Management Testing WSTG-CONF-01 Test Network Infrastructure Configuration WSTG-CONF-02 Test Application Platform Configuration WSTG-CONF-03 Test File Extensions Handling for Sensitive Inform...
CORS - Cross-origin Resource Sharing CSP - Content Security Policy CORP - Cross-origin Resource Policy HTTP Headers 1. Enforce HTTPS If you're deploying your app, make sure your backend only allows HTTPS requests. ✅ In Next.js, you don't need...
