Web
- Two locks on a static siteThis site is static, but it has a private studio where I write and keep documents. It is guarded twice: once at the edge by an identity service, and again inside the code by checking the signed token myself. Why one lock is not enough, and the ten tests that prove the second one.
- Zero inline scripts, and the six things that broke on the wayThis site runs under a Content Security Policy that only allows scripts from its own files. Getting there took six fixes, most of them in places I did not expect: the build tool, a syntax highlighter, a page-turn library and a diagram renderer.
- Turning a web page into a book: pagination, page turns and fullscreenMy book is HTML. I wanted it to read like a book: real pages, a page turn, fullscreen that survives the next chapter, and a front page you can always get back to. How the reader measures pages in the browser, and what it costs.