Understand JavaScript, React & Next.js — one short post at a time.

Practical, diagram-first explanations you can read over coffee. 75 posts and counting.

Newest post

XSS vs CSRF: Two Browser Attacks With Two Different Fixes

XSS runs the attacker's code on your page. CSRF makes the browser send a request you didn't mean to. Each cookie flag stops only one of them.

7 min read
Read post →
Browse all 75 posts →

Short posts on one theme, meant to be read in order. Each part stands alone, and together they build the full picture.

Get new posts in your inbox

One email when a new post is out: short, diagram-first explanations of JavaScript, React and Next.js. No spam, unsubscribe any time.