
Prompt Injection Is the New XSS for AI-Powered Web Apps
How prompt injection mirrors XSS in WordPress, Shopify, and Next.js AI features, plus least privilege and human-approval defenses.
Loading application...
Thoughts on development, technology, and building better software. Here I share insights, tutorials, and lessons learned from my journey as a developer.

How prompt injection mirrors XSS in WordPress, Shopify, and Next.js AI features, plus least privilege and human-approval defenses.

Lessons from Australia's Medicare AI agent incident for WordPress, Shopify, and Next.js teams: least privilege, human gates, and disclosure.

Discover how Headless WordPress with Next.js combines the power of WordPress as a CMS with the speed, flexibility, and modern development capabilities of Next.js. Learn why this decoupled architecture is shaping the future of web development.

How I built Juan8 Karaoke as a Next.js realtime app with Socket.IO, QR session remotes, YouTube playback, Vercel, and a Railway socket server.

Lessons from a headless WordPress Next.js rebuild: when the split is worth it, content modeling, previews, and SEO pitfalls like canonicals and sitemaps.

How a Senior Web Developer uses N8N GoHighLevel automation for lead handoffs, alerts, and site ops after launch, without fake run counts or client secrets.

How a Senior Web Developer approaches Shopify custom theme development for industrial catalogs and DTC brands, using OS 2.0 sections, Liquid, and metafields.

How a Senior Web Developer builds custom WordPress themes and plugins from scratch when page builders hurt performance, maintainability, or real client workflows.
Get notified when I publish new posts about development and technology.