Articles
Deep dives on .NET, React, cloud and everything in between.
Code Splitting
Code splitting divides a large JavaScript bundle into smaller chunks so users do not have to download all application code before using the first screen. Route-based splitting is one of the most practical approaches.
28 Sep 2026 · 27 views
Accessibility a11y
Accessibility means building interfaces that people with different abilities can use. In React this includes semantic HTML, keyboard support, labels, focus management, accessible names, error announcements, and appropriate ARIA when native HTML cannot express the required behavior.
28 Sep 2026 · 24 views
TypeScript with React
TypeScript gives React applications compile-time checks for props, state, API models, events, hooks, and reusable components. It is especially valuable in large teams because it makes contracts between components and services explicit.
28 Sep 2026 · 27 views
Environment variables
Environment variables allow builds and applications to receive environment-specific configuration such as API base URLs, feature flags, and build settings. They are configuration, not a secure place to store secrets in a browser application.
28 Sep 2026 · 24 views
XSS Prevention - Cross-Site Scripting
Cross-Site Scripting occurs when attacker-controlled content is interpreted as executable HTML or JavaScript in a user's browser. React escapes ordinary text rendering by default, but applications can reintroduce risk through unsafe HTML rendering, unsafe DOM APIs, third-party scripts, and insecure content handling.
28 Sep 2026 · 25 views
CORS and CSRF
CORS and CSRF solve different problems. CORS controls whether browser JavaScript is allowed to read cross-origin responses. CSRF protects cookie-authenticated applications from unwanted state-changing requests initiated by an attacker-controlled site.
28 Sep 2026 · 22 views
JWT & Secure Token Handling
JWT is a token format often used to carry signed claims between parties. JWT itself is not a complete authentication architecture. Security depends on how tokens are issued, validated, stored, transported, expired, rotated, and revoked or otherwise invalidated.
28 Sep 2026 · 26 views
Authentication & Authorization
Authentication identifies a user. Authorization determines what that user is permitted to do. A production React application normally handles authentication state, protected routes, session expiration, permission-based UI, and API authorization while relying on the backend as the security authority.
28 Sep 2026 · 29 views
Error Handling
Production error handling has several layers: validation errors, network failures, API errors, rendering errors, authentication failures, and unexpected application errors. Each should have an appropriate recovery path.
28 Sep 2026 · 18 views