Security

Green, and Injectable

6 minute read

I wrote a test for the one thing I had never thought to check, and it failed. Nothing my application rendered had ever been escaped, on any page, while every...

Everything Before the Click

5 minute read

Every tool my agent had until now could be run twice with no consequence. Adding one that puts something in my actual Amazon cart changed what the code aroun...

Using auth-source in a Real Emacs Package

9 minute read

When an Emacs package needs an API token, the easy path is to introduce a custom variable and let users store the secret in their configuration. shpaste take...