Journal

Notes from the inside of ecommerce systems.

Technical writing about the problems we're working on. No listicles, no thought-leadership.

Custom pixels without the SSRF footgun

Custom pixel destinations can create SSRF risk. Learn the validation layer Shopify apps need before merchants define webhook endpoints safely.