Tessera
Folgen

Arcjet

@arcjet.com

The security platform that ships with your code. Bot detection. Rate limiting. Email validation. Attack protection. Data redaction. A developer-first approach to security.

15 Posts41 Follower121 Folgt
Arcjet@arcjet.com · 12mo ago

Historically, the deal was fair: 1. You allow Google to crawl your site. 2. Google shows snippets in search results. 3. You get traffic in return. Sometimes, algorithm changes hurt, but overall, the traffic upside made it worth it. The equation may be shifting. blog.arcjet.com/how-long-unt...

How long until we need to block Google?

Google AI Overviews are causing fewer clicks for some site owners. If this is a fundamental shift in the web's traffic economy, how can site owners control where their content appears?

blog.arcjet.com

Liran Tal@lirantal.com · last yr.

I found a vulnerability in Nuxt MDC: www.nodejs-security.com/blog/nuxt-md... Are you using the Nuxt MDC library to render LLM generated content in your Nuxt.js apps? You want to read this article to understand how I came to find a XSS vulnerability identified today as CVE-2025-24981

How I found an XSS in the Nuxt MDC Library for Markdown Content

Are you using the Nuxt MDC library to render LLM generated content in your Nuxt.js apps? You want to read this article to understand how I came to find a Cross-site Scripting vulnerability identified today as CVE-2025-24981

nodejs-security.com

Simon Willison@simonwillison.net · last yr.

Nice clear explanation of how GitHub roll out new implementations of features out that get 2,000 queries a second - including dark-shipping to 1% of users where the new implementation is invisibly compared with the production one via a background job

GitHub@github.com · last yr.

We rebuilt GitHub Issues search to make it faster, more flexible, and now powerful with nested queries and boolean operators! 🔎 Take a look at the engineering behind this revamp and then try out the advanced search syntax for yourself to find exactly what you need. ⬇️

Liran Tal@lirantal.com · last yr.

Wonderful talk by Ariel Shulman about the role TypeScript plays in development and how to avoid type safety mistakes in runtime

Ariel Shulman @ NodeTLV '23 | Typescript. Runtime. And In Between.

NodeTLV 2023 www.nodetlv.com Israel's Annual Node.js conference Powered by EventHandler and Node.js-IL Typescript. Runtime. And In Between. English | Intermediate Typescript has become a code of conduct in the industry in the last few years, and for a pretty good reason. However, if you want to really cover type validation in runtime- TypeScript alone isn’t enough. In this session we're going to go under TypeScript’s hood and understand the difference between compile-time and runtime. We will see where are the places where can’t trust TypeScript to validate our types. We will explore Zod and see some cool tricks and best practices we can apply to improve runtime type safety to any code base Ariel Shulman Full Stack Developer @ Illumex Full Stack developer for Illumex, in my last position I was doing Full Stack in Sisense. My stack includes Nestjs, Typerscript, React, Neo4j, PostgreSQL, FastAPI.

youtube.com

Arcjet@arcjet.com · 2y ago

After a short internal Rust vs Go bake off, we chose Go + Gin to reimplement our REST API. Our low-latency gRPC API is also implemented in Go, which gets called from our JS SDK.

Bild
Arcjet@arcjet.com · 2y ago

Implementing request parsers in Rust allows us to take advantage of its inherent memory safety, correctness, and performance. That's why we used Nom to build our email validation.

Arcjet@arcjet.com · 2y ago

There are various attack techniques that all aim to overload a GraphQL with queries to achieve a Denial of Service (DoS) outage at the application level Query Batch DoS Attack, alias DoS Attacks, Duplication DoS Attacks, Circular Query DoS Attacks...