My notes on modern front-end architecture, web performance, technology, and more.

De-risking the deployment of a Content Security Policy

The use of a CSP is an important step in securing a web application and protecting its users from various types of attacks. By using the Content-Security-Policy-Report-Only response header, web developers can safely test and debug their CSP rules before they are fully implemented, helping to minimize the risk of any issues occurring during deployment.

A Quick Primer on Core Web Vitals

Core Web Vitals are a set of metrics that measure the performance and user experience of a web application. These metrics are designed to provide a consistent and objective measure of the performance of a website and to help web developers and designers optimize their websites for better user experience.

Managing Cognitive Load

Cognitive load can be a team morale killer. Here are some strategies for managing cognitive load while building your next project.

GraphQL Server: After ‘Hello, World’

So you’ve kicked the tires and decided GraphQL is a good approach for your project. Now you’re staring at an empty editor window, pondering on how to structure your code...

GraphQL as a Microservices Routing Layer

There remains a few pain points in a services approach I’ve experienced around Service Contracts, and GraphQL has become a great tool in the toolbox for addressing these.