Your Upload Form Is Publishing Users' Home Addresses: Stripping EXIF Client-Side and Server-SideIf your app lets users upload photos (marketplace listings, avatars, support tickets, community posts) and you serve the original file back, there's a good chance you're also serving the GPS coordinat19h ago · 3 min readnibbo.hashnode.dev
Captions for Product Demo Videos: SRT vs WebVTT, the track Element, and When to Burn Subtitles InMost product teams add a demo video to the landing page and forget captions until someone points out that most social video is watched muted, or an accessibility audit flags it. Then the questions sta1D19h ago · 3 min readnibbo.hashnode.dev
Hashing a 4 GB File in the Browser: Why crypto.subtle.digest Isn't Enough and What to Do InsteadComputing a checksum client-side is a common requirement: verifying a download, deduplicating uploads before they hit the server, or giving users a way to check an ISO without installing anything. The19h ago · 3 min readnibbo.hashnode.dev
Does That Online Converter Really Not Upload Your File? A 5-Minute DevTools Audit"Your files never leave your device" is a popular claim on tool websites now. Sometimes it's true. Sometimes the page sends the file to an API and deletes it later, and sometimes it ships it to a thir1d ago · 3 min readnibbo.hashnode.dev
Before You Attach That Log or PDF to a Ticket: Redacting PII So It's Actually GoneA customer emails a screenshot of an error with their card's last digits visible. A teammate attaches a 3,000-line log to a public GitHub issue. Someone needs ChatGPT to explain a stack trace that con1d ago · 3 min readnibbo.hashnode.dev
