The Engineering Reality of JSON to CSV Conversion: Dimensionality Reduction, RFC 4180, and Formula Injection
Why converting hierarchical JSON trees to flat matrices breaks in production, from RFC 4180 escaping to formula injection attacks.
Latest articles
Demystifying Regular Expressions: From NFA Backtracking and ReDoS to the Modern /v Flag
Exploring the mechanics of NFA state machines, catastrophic backtracking, the stateful lastIndex trap, and modern ECMAScript features.
Demystifying Cron Expressions: Dialects, Daylight Saving Traps, and Drift in Modern Distributed Systems
How syntax dialects, daylight saving transitions, and synchronized load spikes cause silent failures in background task schedulers.
Beyond Base64: The Anatomy of a JWT, Signature Forgery, and Common Security Blunders
A technical deep dive into RFC 7519, the 'alg: none' flaw, algorithm confusion attacks, and defensive token validation in production.
Rethinking Markdown-to-PDF: Moving Document Compilation from Serverless Puppeteer to In-Browser AST Pipelines
How modern CSS Paged Media, Web Workers, and syntax AST transformations eliminate server cold starts and privacy risks in technical publishing.
Why Your 'Redacted' PDF Is Still Leaking Secrets: The Anatomy of PDF Content Streams
A deep dive into PDF specification internals, why visual blackout overlays fail, and how byte-level client-side sanitization actually works.
Why Most PDF Redaction Fails: The Mechanics of True In-Browser Vector Sanitization
A deep dive into PDF content streams, glyph removal, and how to scrub sensitive data without server exposure.
Building a Zero-Upload PDF Merger: Client-Side Binary Stitching with WebAssembly and ArrayBuffers
How to merge multi-megabyte PDF files inside the browser sandbox without server dependencies or memory leaks.
