#web-development

Articles tagged with #web-development

RAG's Dirty Secret
Your Vector Index Is a Second Database
Sep 6, 202620 min read33
When AsNoTracking Makes EF Core Slower
There is a piece of EF Core advice that appears in almost every performance discussion: If the query is read-only, use AsNoTracking(). Its usually good advice. Tracking entities requires EF Core to
Sep 1, 202613 min read206
Preventing Broken Object Level Authorisation in ASP.NET Core APIs
An authenticated user calls your API with a valid access token. The token contains the right role and the endpoint requires authorisation. Everything appears secure. The user then changes /claims/8d61
Jul 18, 202610 min read155
Cutting AI Prompt Tokens by Turning Text into Images with .NET
Sending text to an AI model as an image sounds like it should cost more. The application has to render the text, encode a PNG and send a much larger payload over the network. Yet for the right kind of
Jul 18, 202612 min read183
Building SSRF-Resistant HTTP Clients in .NET
Applications increasingly accept URLs from outside their own code. A webhook tester calls an endpoint supplied by a customer. An image service downloads a remote avatar. A document pipeline retrieves
Jul 17, 202612 min read172
What If Your Pull Request Had a Blast Radius Score?
Some pull requests look harmless until they reach production. Then someone notices the change touched authentication, a shared response contract, an EF Core migration, and one production config value
Jul 7, 202618 min read133