Topic
8 articles found
Django Session Cookie vs localStorage JWT Security Comparison A team ships a Django REST Framework API, adds a React SPA on the same origin, and reaches for localStorage to store JWTs because that's what the tutorial used. Six months later, a reflected XSS on a third-party widget exfiltrates every a
The landscape of data fetching in React has more options than ever. Here is when each one is the right choice: Scenario Approach Server Component fetching data async / await directly in the component Passing async data from Server to Client Component Create promise on server, use() on client with Su
A few months back I contributed a fix to react-bits, an open source library of animated React components. The bug was subtle — enableMagnetism and enableTilt animations had a 300ms delay because the component used transition-all in its base CSS class. This caused GSAP transform animations to fight a
useState looks simple on the surface, but behind it is one of the core ideas that makes React work: persistent state + re-rendering. In this article, we'll build a tiny version of useState ourselves to understand the mental model behind it. First, we know that the useState returns a state and a func
Five years of React. Hundreds of components. Dozens of refactors. And the lesson I keep re-learning? How you structure your components matters more than what's inside them. In this post, I'll walk through four patterns I use regularly in production today — with real examples, their trade-offs, and w
Quick Recap In the previous article, we introduced priority-based and layered schedulers, solving the problem of “which tasks should run first.” However, real-world applications introduce another challenge: long-running tasks can still block the main thread. To keep applications responsive, a schedu
This is a submission for the GitHub Finish-Up-A-Thon Challenge I revived a 4-year-old React quiz app I abandoned on GitHub. It had been sitting untouched for years... broken, incomplete, and barely functional. When I fired it up, it didn't even make it past the loading screen. Sigh... I expected thi
This is a submission for the Google I/O Writing Challenge I’m a cybersecurity and full‑stack student who lives inside React, Firebase, Android Studio, and random security tools. When I watched Google I/O 2026, I expected “just” new models and APIs. Instead, I walked away feeling like the definition
