A blog by Mo' Claudius
Writing about architecture and building software that lasts.
Pull up a chair and stay a while.
Fresh off the keyboard
Latest posts
Your OG Images Run on Your Server: Dissecting Next.js CVE-2026-94545
The share-card route nobody threat-models turned JSX into SVG, and SVG into code execution. Here is the chain, the exposure test, and the audit.
Nov 7, 2026
Stop Using effect() for Everything
A practical decision guide to signal, computed, linkedSignal, resource, and effect.
Nov 1, 2026
Your Components Know Too Much About NgRx
Do you still need an NgRx facade in the SignalStore era?
Oct 5, 2026
OWASP Top 10 for Angular (2025 Edition)
How each 2025 risk shows up in a real Angular app, how to test for it, and how to fix it.
Oct 1, 2026
Auditing in Rails with PaperTrail
Let us go on a journey through the world of Rails together, where the saga of data tracking unfolds with the magic of the PaperTrail gem. This narrative isn't just about lines of code; it's about the
Feb 8, 2024
Discovering the Impact of takeUntilDestroyed and DestroyRef on Angular's Enhanced Functionality
Introduction In the dynamic world of web development, Angular has stood out as a front-runner, continually evolving to meet the demands of modern applications. With the advent of takeUntilDestroyed and DestroyRef, we angular developers are witnessing...
Dec 12, 2023
Newsletter
Get the next essay in your inbox
Two posts a week, every Tuesday and Thursday. Worth your coffee break. No spam, unsubscribe anytime.
Subscribe