Web
7 posts
From URL to Pixels: What Really Happens Behind the Scenes
A full breakdown of what happens between hitting Enter and seeing a page — DNS lookup, the TCP/TLS handshake, how the request crosses the Load Balancer and Nginx to reach your server, and how the HTML pipeline turns the response into pixels.
Browser Caching Strategies Explained: Cache-Control, ETag, and Service Worker
How Cache-Control, ETag, and Service Worker split the work of caching, so your site loads fast without leaving users stuck on stale content.
CSR vs. SSR vs. SSG: How Rendering Strategies Really Differ
Starting from how a browser actually gets a page, this breaks down when each of CSR, SSR, and SSG produces HTML, what it costs you, and how to pick the right one for your project.
CSP: Building the Browser's Last Line of Defense with Content Security Policy
How Content Security Policy's allowlist model works, the directives you'll actually use, how nonces and hashes handle inline scripts, and the pitfalls that trip people up in practice
XSS: Cross-Site Scripting in the Browser
How XSS lets attackers run malicious scripts in someone else's browser, the differences between Stored, Reflected, and DOM-based XSS, and what frontend and backend both need to do to actually stop it
CSRF: How Cross-Site Request Forgery Actually Works
An explanation of why browsers attach your login credentials to requests without you knowing, how CSRF attacks actually work, and how to put defenses like CSRF tokens and SameSite cookies into practice
CORS: The Browser's Cross-Origin Resource Sharing Mechanism
An explanation of why browsers block cross-origin requests, how CORS actually works, and a walkthrough of preflight requests, common header configurations, and debugging techniques