What to know before you launch or improve a website: guides to understand your options and choose well, and engineering notes for developers.
For developers: tools, common mistakes and good practice.
A "return to" parameter that only checks the first character can send your users to any site, from a link on your own domain. Why string checks fail, and the check that works.
27 September 2026 · 3 min read
The development server hides a whole class of problems. What to check on the real production build and the real domain before the first visitor arrives — with commands to check it.
27 September 2026 · 4 min read
Canonicals pointing at localhost, a URL frozen at build time, uploads that 404, a security policy that silently breaks the page. Four Next.js bugs invisible in development, and how to catch them.
27 September 2026 · 4 min read