API-first architecture: smart default or unnecessary complexity?
Decide when a customer portal needs an API contract, where to put the network boundary, and what a client should do after a timeout.
Articles
Practical articles on web development, accessibility, UX and AI, with evidence-based decisions and checks.
API security in 2026: why gateways and API keys are not enough
A valid API token does not grant access to every record. NIST and OWASP explain why object authorization and negative tests matter.
ACM: 61% of major Dutch webshops fail accessibility checks
ACM found that 61% of the major Dutch websites examined prevented accessible ordering. Why the entire checkout journey matters.
Chrome 146 Sanitizer API: safer HTML without XSS shortcuts
How Chrome 146’s Sanitizer API helps render rich text more safely, including compatibility, fallbacks and security boundaries.
Prevent technical debt: make maintainability visible
Technical debt is not simply bad code. Learn to make its consequences visible, record deliberate trade-offs and prioritise maintenance.
Headless, traditional or hybrid CMS: what should you choose?
Headless, traditional or hybrid? Choose a CMS architecture that suits editorial workflows, channels and long-term maintenance.
Form validation: build accessible error messages
Why a red border is not enough: build recoverable form errors with semantic HTML, JavaScript and accessibility testing.
An accessible contact form: 7 checks before launch
A technically functioning form can still leave visitors stuck. Seven checks cover the journey from input to confirmed receipt.