Section
Security
Hardening, vulnerabilities and pragmatic compliance for small sites.
Security
Cloudflare makes OAuth scopes optional for Wrangler and its MCP server
Cloudflare now lets you grant only part of the permissions Wrangler and its MCP server request. The change brings command-line…
Security
Next.js schedules a critical security release for 26 August
Vercel has announced a Next.js security release for 26 August 2026 that will fix one critical-severity flaw. Versions 16.3.3 and…
Security
Content Security Policy: building one that holds
A well-built Content Security Policy blocks injected scripts from running without breaking the site, provided it is rolled out in…
Security
WordPress hardening: the minimal security baseline
Wordfence, Fail2ban and application passwords: three components, half a day, and nearly all automated attacks stop having any effect.