Tag: Security

This is what a Principal Engineer’s codebase actually looks like — a live, unscripted walkthrough of iching.rocks. This post was generated with an assist from Claude, querying my self-hosted Engram MCP server against the live iching.rocks repository — itself a demonstration of the semantic-memory infrastructure described below. Nothing here is hypothetical; every snippet was pulled […]

Most developers know Content-Security-Policy exists. Fewer have actually shipped an enforcing policy. And almost nobody talks about the part that makes nonce-based CSP genuinely hard: making it work correctly across an SSR caching layer, a reverse proxy, and a browser that will block your entire page if a single <style> tag is missing its nonce. […]