Blog · Web development
Practical guides to building web apps with Next.js, React, TypeScript and Node.js — real-time features, authentication, security and accessibility.
5 min read
Node2Shell is a high-severity bug in the Brotli decoder bundled with Node.js that can lead to remote code execution. Here’s who is exposed, how to check your servers, Docker images and CI, and which versions fix it.
6 min read
Next.js 16.4.1 and 15.5.28 fix two critical remote code execution bugs and a Server Actions denial of service. Here’s how to tell if your app is affected, how to upgrade safely, and what the November 3 security release means for you.
6 min read
Tools like Claude Code, Cursor and GitHub Copilot can now plan, edit files, run tests and open pull requests. Here’s how to use AI coding agents on production code without losing quality, security or understanding — with concrete team guidelines.
6 min read
Every login form hides a set of design decisions — sessions or tokens, cookies or headers, passwords or passkeys. Here’s how modern web authentication works and how to choose a setup that’s secure without being complicated.
5 min read
Most web breaches don’t need genius hackers — they exploit a familiar list of mistakes. Here’s a practical tour of the OWASP Top 10 risks, with concrete examples and the habits that prevent them.
6 min read
Describing what you want and letting AI write the code has gone from joke to everyday workflow. Here’s an honest look at what vibe coding does well, the risks it hides, and a practical way to use it without shipping a mess.
5 min read
Around one in six people lives with a significant disability — and accessible sites work better for everyone. Here’s what WCAG 2.2 asks for, the issues that matter most, and how to build and test accessible interfaces in everyday work.
6 min read
Live chat, notifications, dashboards and collaborative tools all need the server to push updates instantly. Here’s how Socket.IO works, the core concepts — events, rooms, acknowledgements — and how to secure and scale it in production.
5 min read
When a project grows into a website, an admin dashboard and an API, keeping them in separate repositories gets painful. Here’s how a Turborepo monorepo works, how to set one up, and the caching that makes it fast.
6 min read
Docker packages your app with everything it needs to run, so it behaves the same on your laptop, your teammate’s laptop and your server. Here’s how images, containers and Compose work — with a production-ready Dockerfile for a Node.js app.
5 min read
Translating your website can open new markets — or quietly confuse Google and frustrate visitors. Here’s how to structure a multilingual site, use hreflang correctly and avoid the mistakes that cost international traffic.
6 min read
TypeScript catches whole categories of bugs before your code runs and makes large codebases far easier to change. Here’s a practical tour of the features you’ll use every day — and how to adopt it without slowing your team down.
6 min read
Google measures how fast your pages load, how quickly they respond and how stable they look — and visitors notice all three. Here’s what LCP, INP and CLS mean, how to measure them properly, and the fixes that make the biggest difference.
6 min read
The Next.js App Router and Prisma ORM are a type-safe, productive pairing — database schema to UI in one TypeScript codebase. Here’s how the pieces fit together, from schema and queries to Server Actions, validation and caching.