Blog

Articles on web security and on coding with AI, grouped by topic. Each section opens with the article to read first.

Web security

How to protect a web application with users, layer by layer, and how to check each control.

Start here

September 27, 202624 min read

The ten layers that protect a web application with users, with an Express example and how to check each one.

September 27, 202627 min read
The most common web attacks and how to prevent them
The fourteen most frequent attacks on a web application, with the code that allows each one and its fix.
- Security
September 27, 202619 min read
What CORS is and how to fix the "blocked by CORS policy" error
Why the browser blocks a response that curl reads, what CORS protects and how to configure it safely.
- Security
September 7, 202618 min read
Eight things to check in the code your AI writes
Eight common security failures in AI-generated code, each with its fix and the command that checks it.
- Security
September 7, 202618 min read
How to ask an AI for secure code
What to put in the request to get secure code from an AI, and what to check afterwards.
- AI
- Security
September 7, 202618 min read
npm vs pnpm 11: install script security and allowBuilds
Four npm and pnpm install behaviours, measured version by version, and the configuration that makes them match.
- Security
- Infrastructure

How to set up a project to work with an agent, how to review what it produces and how it affects learning.

Start here

September 8, 202633 min read

What a coding agent is, how to set up a project for it and how to review what it does.

September 27, 202622 min read
How to set up a complete environment for coding with agents
Reviewer subagents, work agents and a prompt that sets them up in your project, with what each piece costs.
- AI
September 8, 202623 min read
Do you learn to code if the AI writes the code?
What the experiments that took AI away before the exam measured, and which ways of asking preserve learning.
- AI