Web application frontend security: XSS, Content-Security-Policy, and where to keep tokens
Where XSS still gets into React and Astro apps, how to roll out a Content-Security-Policy safely, and why session tokens belong in HttpOnly cookies.
Writing
Articles
Practical articles on architecture, frontend security, teaching junior developers, and staying effective in this job for the long run.
Staying effective as a developer for twenty more years
How to keep learning without chasing every trend, protect time to think, and avoid burning out. Practical habits for developers who plan to do this for decades.
Hexagonal architecture in NestJS: structure, rules, and when to skip it
How ports and adapters map onto a NestJS project: module-based folders, the dependency rule that matters, wiring with Nest DI, and when to skip it.
Teaching junior developers: a guide for seniors who have never mentored
Being a good developer does not make you a good teacher. Practical habits for code review, pairing, and feedback when you mentor a junior for the first time.
Architecture decision records: writing down why, not only what
How a development team can use short decision records to keep the reasons behind technical choices, and what to do so the habit survives past the second month.