Skip to content
Shawon

Blog

Notes on building web applications — what worked, what broke, and what I'd do differently.

4 min read

Why your page scrolls sideways on mobile

The element that looks broken is almost never the one you have to fix. A short explanation of min-width: auto, and the one-line fix.

css · responsive · debugging

4 min read

You cannot hide an API key in frontend code

Not in a constant, not in an env file, not behind a build step. If the browser can use it, the browser can show it — and so can anyone who opens DevTools.

security · frontend · api

4 min read

Your payment webhook will fire twice

Gateways retry when they don't hear a clean answer. If your handler isn't built for that, one payment becomes two accounts, two emails and two deliveries.

backend · payments · webhooks