Your bundle’s raw KB lie: measure gzip and brotli before you merge
You open dist/ , add up the JS, and relax: “the bundle is 420 KB.” That number is how much the file takes on disk. It is not what the person who opens your app …
Englishdev.to WebDev
最新资讯
言栖资讯收录 136912 篇 AI、开发与建站文章（English），按发布时间排序，支持搜索与按语言筛选。
A Frame Building Plan: Designing a Functional and Modern Cabin
A practical guide to A-frame cabin layouts, loft design, natural lighting, and important construction considerations. A-frame cabins offer a distinctive archite…
Englishdev.to WebDev
Social Preview Card Maker in the Browser: Canvas Sizes, Contrast and PNG vs SVG
Social Preview Card Maker in the Browser: Canvas Sizes, Contrast and PNG vs SVG I work on OnePassApps, the team behind app.onepassapps.com. The Social Preview D…
Englishdev.to WebDev
Claude Code was mailing your email address to every website it visited: the User-Agent leak, the 5-month system-prompt issue, and the 5-point check
Two GitHub issues, five months apart, describe the same leak through two different pipes. Yesterday's, filed at 22:13 and now at 360 reactions: Claude Code send…
Englishdev.to Security
The agent that wouldn't delete my email
AN EXPERIMENT IN PUBLIC · DAEMON/03 TL;DR: My worker refused to delete my email while I was asking it to. I'd built it that way. I gave a small company of agent…
Englishdev.to Security
SOC 2 Under Quebec’s Law 25: What Changes If You’re Selling Into Quebec Specifically
A SaaS vendor sends its SOC 2 Type 2 report to a Quebec client and assumes the compliance conversation is done. Then the client’s privacy officer asks for a cro…
Englishdev.to Security
Choosing a CMS for Multiple Websites: Architecture, Access, and Recovery
Choosing a CMS for multiple websites starts with an architectural question: what should be shared, and what must remain independent? A chain of regional offices…
Englishdev.to Security
Scanning 525 Skills and 153 Claude Code & Codex Logs for Prompt-Injection & Repo-Open Traps
The discussion on r/ClaudeAI ( 1xozfcv ) about why 98% of the 16,060 open GitHub issues on anthropics/claude-code cannot simply be handed to autonomous triage a…
Englishdev.to Security
Quarantine, Don't Delete: A Simple Spam Score for Contact Forms in Node.js
Most advice about contact form spam ends with "block it". Add a CAPTCHA, reject anything that looks odd, move on. That works until a real buyer gets blocked. Or…
Englishdev.to Security
Is Your Regression Suite a Safety Net or a Time Sink?
What regression testing is actually for Regression testing means re-running existing tests after a change to confirm that what worked before still works. Done w…
Englishdev.to Security
What Is a Passkey? How to Set It Up and Stop Typing Passwords
Originally published on CodingCush . A passkey is a new way to sign in that replaces your password with your face, your fingerprint or your phone PIN. Instead o…
Englishdev.to Security
Package Delivery Scams: How to Spot Fake USPS and Royal Mail Texts
Originally published on CodingCush . You get a text message: "USPS: your package is held at the warehouse. Pay a $1.45 redelivery fee here." Or in the UK: "Roya…
Englishdev.to Security
How to Stop Spam Calls and Robocalls on iPhone and Android
Originally published on CodingCush . Your phone rings from a number that looks local. A robot voice says your bank account is locked, your National Insurance or…
Englishdev.to Security
A Backdoor Sat in the Firmware Partition of 1.3 Million Set-Top Boxes
TL;DR A botnet is a network of compromised devices that a remote operator controls, usually to rent out the devices or to run fraud at someone else's expense. O…
Englishdev.to Security
Security Risks of AI-Generated Code: Research and a Review Checklist
Originally published on shipfastdev.com . AI-generated code usually works, but it is often not secure. In Veracode's 2026 tests, models produced code that compi…
Englishdev.to Security
total - used Said Start, free Said Refuse: The Root Reserve Inside shutil.disk_usage and a Clip Writer's Free-Space Check
On one disk, at one moment, the same call to shutil.disk_usage told one free-space guard to start a 2 GiB batch of camera clips and told another to refuse it. T…
Englishdev.to Linux
Linux file Descriptor Limits and Socket Leaks: ulimit and /proc/sys/fs/file-max
Originally published on Code Beneath . You deploy a service, it runs fine for hours, then crashes with "too many open files." The root cause is almost always a …
Englishdev.to Linux
You can now install an OS in seven seconds. Is your team aiming high enough?
User expectations in software are shifting, radically. Installing an operating system used to take a long time. Sometimes hours, once you counted drivers, updat…
Englishdev.to Linux
Testing the Next.js Server Boundary: Security Contracts Over Green Checkmarks
Testing the Next.js Server Boundary: Security Contracts Over Green Checkmarks Your E2E suite is green. The deployment passes. At 2:47 AM, PagerDuty wakes you: a…
Englishdev.to React
How to scrape Google Play app reviews by star rating and app version with Python
App reviews are free user research. People write them unprompted, they mention the app version, and on Google Play the developer can answer in public. The hard …
Englishdev.to Python