Blog.

Notes on the tools, patterns and decisions I rely on when building with React, Next.js and TypeScript.

A space to think through the trade-offs behind my projects, rather than a general tech blog.

September 23, 20266 min read

A four-line feature turned into a lesson on open redirects, URL parsing, and why the best fix was removing the problem instead of validating it.

Next.jsSecurityAI