dotpaneComing soon

Blog

Guides for people who build their own dashboards: API keys, CORS, sandboxing, and panes worth copying.

RSS feed
Guide

CORS error on fetch: what causes it and how to fix it

Why the browser blocks the call, and which fix fits which case.

6 min readRead the guide
GuideHow to hide an API key in frontend JavaScriptYou can’t. Anything the browser can read, a visitor can read. Here is what to do instead, with the trade-offs of each option. · 2 min readEngineeringSSRF protection for a fetch endpoint in Node.jsPrivate ranges, DNS rebinding, redirects and IPv6, one at a time. · 6 min read