· 8 min read
Next.js App Router Security Checklist
A practical security checklist for Next.js App Router apps: server actions, route handlers, middleware, env vars, CSRF, headers, webhooks and per-user caching.
- Next.js
- Security
- Checklist
Next.js
Guides on code security, AI code review and shipping fixes that hold.
· 7 min read
Security Headers Explained: CSP, HSTS and the Rest
A practical guide to CSP with nonces and strict-dynamic, HSTS and preload, frame-ancestors, Referrer-Policy, Permissions-Policy and COOP, with a Next.js config.
- Security
- Web
- Next.js