A blog by Mo' Claudius

Writing about architecture and building software that lasts.

Pull up a chair and stay a while.

Fresh off the keyboard

Latest posts

Stop Reaching for typeof window: React 19.3's browser() API

Browser-only components finally get a declared answer instead of a mounted flag, and React reports every bailout it makes for you.

Nov 10, 2026

Node.js 26 Shipped Quietly Powerful Stuff

The release nobody will launch, and everybody will install

Nov 8, 2026

Your OG Images Run on Your Server: Dissecting Next.js CVE-2026-94545

The share-card route nobody threat-models turned JSX into SVG, and SVG into code execution. Here is the chain, the exposure test, and the audit.

Nov 8, 2026

Stop Using effect() for Everything

A practical decision guide to signal, computed, linkedSignal, resource, and effect.

Nov 1, 2026

Your Components Know Too Much About NgRx

Do you still need an NgRx facade in the SignalStore era?

Oct 5, 2026

OWASP Top 10 for Angular (2025 Edition)

How each 2025 risk shows up in a real Angular app, how to test for it, and how to fix it.

Oct 1, 2026

Auditing in Rails with PaperTrail

Let us go on a journey through the world of Rails together, where the saga of data tracking unfolds with the magic of the PaperTrail gem. This narrative isn't just about lines of code; it's about the

Feb 8, 2024

Newsletter

Get the next essay in your inbox

Two posts a week, every Tuesday and Thursday. Worth your coffee break. No spam, unsubscribe anytime.