Cloudflare R2 Image Hosting with Workers and D1
Build a Cloudflare R2 image host with a custom domain, authenticated Worker upload API, D1 metadata, restricted CORS, caching, and cost controls.
Page 4
39 posts, page 4 of 4.
Skip Global NestJS Interceptors for Selected Routes
Skip a global NestJS response interceptor on selected routes with SetMetadata and Reflector, while keeping response wrapping enabled everywhere else.
React key Is Not Just a List Optimization
A practical explanation of how React key participates in component identity, why changing it resets state, and when that is the right tool.
Investigating SQL Injection in a NestJS App
A practical review of a SQL injection issue found during a Mini Program security test, covering NestJS validation, ORM query safety, PM2 logs, database constraints, and defense in depth.
Lockfiles Explained: npm ci and pnpm Frozen Installs
Commit the lockfile and use npm ci or pnpm --frozen-lockfile in CI so package manifests cannot silently resolve a different dependency tree.
Mini Program i18n: Lessons from Didi
A review of Didi Mini Program internationalization, covering copy governance, Mini Program runtime constraints, WXS-based translation, cross-platform adaptation, and team workflow.
GitHub Actions as an Automation Entry Point
A practical review of where GitHub Actions works well, where it becomes the wrong execution environment, and how to draw a cleaner boundary for small project deployments.
Mini Program Package Size: Lessons from Didi
A review of Didi Mini Program package size optimization, covering size budgets, dependency analysis, subpackages, npm dependency placement, and architecture tradeoffs.
CORS Cookies Not Sent? Fix Credentials and SameSite
Cross-origin cookies not sent? Check credentials, explicit CORS response headers, Set-Cookie ownership, SameSite, Secure, and browser cookie policy.