API-first architecture: smart default or unnecessary complexity?
Decide when a customer portal needs an API contract, where to put the network boundary, and what a client should do after a timeout.
Category: <span>Web development and architecture</span>
API security in 2026: why gateways and API keys are not enough
A valid API token does not grant access to every record. NIST and OWASP explain why object authorization and negative tests matter.
Chrome 146 Sanitizer API: safer HTML without XSS shortcuts
How Chrome 146’s Sanitizer API helps render rich text more safely, including compatibility, fallbacks and security boundaries.
Prevent technical debt: make maintainability visible
Technical debt is not simply bad code. Learn to make its consequences visible, record deliberate trade-offs and prioritise maintenance.
Headless, traditional or hybrid CMS: what should you choose?
Headless, traditional or hybrid? Choose a CMS architecture that suits editorial workflows, channels and long-term maintenance.