Loading page...
Q&A
Q&AA browser can send some authenticated cross-site requests even when the attacker cannot read the response.
CORS governs response readability for scripts; CSRF defenses prevent unwanted state changes using ambient credentials. Validate tokens and trusted origins independently for state-changing routes.
security
8 minSeparate cross-site request forgery from cross-origin response access and validate state changes.
typescript
8 minUse for-await consumption, cancellation, and iterator return semantics without hiding queues.
unix
8 minUnderstand users, groups, permission bits, file descriptors, and redirection so shell and service behavior is easier to debug.
distributed systems
9 minSeparate consistency guarantees from delivery guarantees and design for the partial failures that make retries necessary.
kubernetes
18 minTrace service traffic, prevent rollout 502s, debug CPU throttling and CoreDNS, and design conflict-safe controller reconciliation.
distributed systems
18 minDesign around Kafka group churn, payment idempotency, coordination limits, sagas, CQRS, and context propagation across async boundaries.
distributed systems
12 minConsumer groups are the mechanism that turns Kafka partitions into scalable, failure-tolerant work units. Learn how rebalances, offsets, and lag interact under load before you ship your first serious pipeline.