Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
eslint
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Jan 2
NestJS Hands You Guards, Pipes, and Throttlers. Your Controllers Ship Without Them. 6 ESLint Rules Catch What You Forgot.
#
eslint
#
nestjs
#
security
#
node
Comments
Add Comment
5 min read
An SSRF in Your Lambda Steals the Execution Role. Action: '*' Hands Over the Account. 14 ESLint Rules Break the Chain.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Jan 2
An SSRF in Your Lambda Steals the Execution Role. Action: '*' Hands Over the Account. 14 ESLint Rules Break the Chain.
#
eslint
#
aws
#
lambda
#
serverless
Comments
Add Comment
6 min read
Performance at Scale: The Static Analysis Standard for 100x Faster Linting
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Jan 2
Performance at Scale: The Static Analysis Standard for 100x Faster Linting
#
eslint
#
javascript
#
imports
#
tutorial
Comments
Add Comment
2 min read
A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
A Hardcoded sk_live_ Key Passes Code Review. It Won't Pass These 27 ESLint Rules.
#
eslint
#
security
#
javascript
#
tutorial
Comments
Add Comment
7 min read
BEGIN on a Postgres Pool Scatters Your Transaction Across Connections. One ESLint Rule Stops It.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
BEGIN on a Postgres Pool Scatters Your Transaction Across Connections. One ESLint Rule Stops It.
#
eslint
#
postgres
#
node
#
database
Comments
Add Comment
4 min read
pg Lets You Concatenate SQL, Hijack search_path, and Leak Every Connection. 13 ESLint Rules Say No.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
pg Lets You Concatenate SQL, Hijack search_path, and Leak Every Connection. 13 ESLint Rules Say No.
#
eslint
#
postgres
#
node
#
database
Comments
Add Comment
6 min read
13 Security Questions Every JavaScript Interview Asks — and the ESLint Rule That Answers Each in CI
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
13 Security Questions Every JavaScript Interview Asks — and the ESLint Rule That Answers Each in CI
#
eslint
#
career
#
security
#
javascript
Comments
Add Comment
5 min read
'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
'3 Lines of Vercel AI SDK Code Are a Prompt-Injection Hole — and "Just Sanitize It" Won''t Close It'
#
eslint
#
ai
#
security
#
vercel
Comments
Add Comment
4 min read
Post-Mortem: Why ESLint Performance Failed (And the 100x Fix)
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
Post-Mortem: Why ESLint Performance Failed (And the 100x Fix)
#
eslint
#
javascript
#
performance
#
typescript
Comments
Add Comment
2 min read
AI Coding Assistants Hardcode Secrets. This ESLint Rule Catches Them — in a Format the AI Can Auto-Fix.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
AI Coding Assistants Hardcode Secrets. This ESLint Rule Catches Them — in a Format the AI Can Auto-Fix.
#
eslint
#
javascript
#
security
#
devops
Comments
Add Comment
5 min read
Your Vercel AI SDK Agent Has 19 Attack Surfaces. Here's an ESLint Rule for Each.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
Your Vercel AI SDK Agent Has 19 Attack Surfaces. Here's an ESLint Rule for Each.
#
eslint
#
ai
#
security
#
vercel
Comments
Add Comment
10 min read
8 of the OWASP Top 10 Are ESLint Rules. 2 Aren't — and That's the Honest Audit Answer.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
8 of the OWASP Top 10 Are ESLint Rules. 2 Aren't — and That's the Honest Audit Answer.
#
eslint
#
security
#
owasp
#
devsecops
1
 reaction
Comments
Add Comment
8 min read
The JWT alg:none Attack: Change One Header Field, Forge an Admin Token. One ESLint Rule Blocks It.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
The JWT alg:none Attack: Change One Header Field, Forge an Admin Token. One ESLint Rule Blocks It.
#
eslint
#
security
#
jwt
#
node
1
 reaction
Comments
Add Comment
3 min read
Your node-postgres Data Layer Fails 4 Ways in Production. SQL Injection Is Only the First.
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 31 '25
Your node-postgres Data Layer Fails 4 Ways in Production. SQL Injection Is Only the First.
#
eslint
#
postgres
#
node
#
security
Comments
Add Comment
4 min read
Same Vulnerable File, 4 Linters: Oxlint Native Caught 1, eslint-plugin-security 21, Interlace 46
Ofri Peretz
Ofri Peretz
Ofri Peretz
Follow
Dec 20 '25
Same Vulnerable File, 4 Linters: Oxlint Native Caught 1, eslint-plugin-security 21, Interlace 46
#
eslint
#
security
#
javascript
#
webdev
Comments
Add Comment
5 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account