Blog
Next.js connection function
Next.js can usually tell a component needs per-request rendering because it calls a Request-time API like cookies() or headers() — that call itse
Dive Deeper
Setting a Content Security Policy (CSP)
Cross-site scripting is one of those vulnerabilities that sounds theoretical right up until it isn't. All it takes is one comment form, one rich-text
Dive Deeper
Next.js cookies function
Cookies are one of those primitives that seem simple until you actually need to read or write one from a server-rendered React tree. In a traditional
Dive Deeper
Next.js Using CSS-in-JS libraries
If you've spent any real time with styled-components, Emotion, or a similar runtime CSS-in-JS library, you already know the pitch: colocate your styl
Dive Deeper
Next.js Setting up a custom server
Every Next.js app already has a server. When you run next start, Next.js spins up an HTTP server for you, wires up its router, and handles every re
Dive Deeper
Next.js Data security in Next.js
For most of the framework's history, the security model of a React app was easy to reason about, whatever code ran in the browser was untrusted by de
Dive Deeper