https://shawonbarua.me/blog Notes on building web applications — what worked, what broke, and what I'd do differently. en https://shawonbarua.me/blog/why-your-page-scrolls-sideways-on-mobile https://shawonbarua.me/blog/why-your-page-scrolls-sideways-on-mobile The element that looks broken is almost never the one you have to fix. A short explanation of min-width: auto, and the one-line fix. Sun, 04 Oct 2026 00:00:00 GMT https://shawonbarua.me/blog/you-cannot-hide-an-api-key-in-frontend-code https://shawonbarua.me/blog/you-cannot-hide-an-api-key-in-frontend-code Not in a constant, not in an env file, not behind a build step. If the browser can use it, the browser can show it — and so can anyone who opens DevTools. Sun, 04 Oct 2026 00:00:00 GMT https://shawonbarua.me/blog/your-payment-webhook-will-fire-twice https://shawonbarua.me/blog/your-payment-webhook-will-fire-twice Gateways retry when they don't hear a clean answer. If your handler isn't built for that, one payment becomes two accounts, two emails and two deliveries. Sun, 04 Oct 2026 00:00:00 GMT