Tag
Tag:security
All the articles with the tag "security".
Sep 12, 2026 · 9 min readcaddy
Hardening Caddy with Coraza WAF and Fail2ban (And Almost Breaking Mastodon)
How I added the OWASP Coraza WAF to Caddy, caught a bot sending 29,000 requests, avoided breaking Fediverse federation, and banned repeat offenders with Fail2ban.
Continue reading →Feb 26, 2026 · 6 min readwebdev
Stop Using innerHTML: The New Firefox Feature That Kills XSS
Firefox 148 just shipped the new Sanitizer API with setHTML(). Here's why you should stop using innerHTML today.
Continue reading →Feb 19, 2026 · 4 min readsecurity
Chasing a Transitive Dependency Vulnerability
How a vulnerability in fast-xml-parser affected my blog through @astrojs/rss, and why transitive dependencies are quietly terrifying.
Continue reading →