Correctness & Security

The failures that only exist because some of your code runs on a server and some in a browser: sessions and authentication across that split, the data that leaks when a server component passes too much, a Content Security Policy that survives a framework's own inline scripts, multi-tenancy and zones, and how to test any of it.