React key Is Not Just a List Optimization
A practical explanation of how React key participates in component identity, why changing it resets state, and when that is the right tool.
Page 3
27 posts, page 3 of 3.
A SQL Injection Incident Review: NestJS Validation, Logs, and Server-Side Security
A practical review of a SQL injection issue found during a Mini Program security test, covering NestJS validation, ORM query safety, PM2 logs, database constraints, and defense in depth.
Frontend Dependencies, Lockfiles, and Reproducible Builds
A practical look at dependency ranges, transitive dependencies, lockfiles, npm ci, pnpm frozen installs, and how frontend projects can make builds more reproducible.
Internationalization for Large Mini Programs: Engineering Lessons from Didi
A review of Didi Mini Program internationalization, covering copy governance, Mini Program runtime constraints, WXS-based translation, cross-platform adaptation, and team workflow.
GitHub Actions Is an Automation Entry Point, Not a Deployment Machine
A practical review of where GitHub Actions works well, where it becomes the wrong execution environment, and how to draw a cleaner boundary for small project deployments.
Package Size Governance for Large Mini Programs: Lessons from Didi
A review of Didi Mini Program package size optimization, covering size budgets, dependency analysis, subpackages, npm dependency placement, and architecture tradeoffs.
Why Cookies Fail in CORS: From withCredentials to SameSite
CORS cookies depend on more than withCredentials. The server CORS headers, Cookie Domain, SameSite, Secure, and third-party cookie policy all matter.