Engineering
The Power of HTTP Headers
How HTTP headers help prevent XSS, clickjacking, private data leaks, and session exposure, with examples for browser permissions, logout cleanup, and Spring Security.
Engineering notes.
Spring Boot
Security Logs That Help Investigate an Incident
Reconstruct a document publication incident with Spring Boot security logs. Keep every operation aware of the user context, correlate requests, record committed outcomes, and preserve useful evidence without copying secrets.
Spring Boot
Authorization Beyond Roles in Spring Boot
Two editors share the same role, but only one owns the document. Follow a Spring Boot authorization flaw, fix it with a lookup scoped to the authenticated owner.
Engineering
Understanding CSRF and CORS policies
A simple guide to CSRF and CORS: - how session cookies work - why CSRF tokens help - what CORS allows the browser to read.
Engineering
Giving Business Conditions a Name: Predicates in Java and JavaScript
What? Why? How? A predicate turns a condition into a named question. Let's filter products by stock and budget in Java and JavaScript, combine small checks, and understand boolean results, short-circuiting, and common pitfalls.
Spring Boot
From YAML to Spring Beans
Configure a Spring bean from YAML using a clear example: an email template with a sender address and subject.
Engineering
Still building
Notes on code, architecture, and the decisions behind the systems we build.