Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#webhooks×
Sort
2 posts ← reset filters
SecurityOne SSRF Control Is Not Enough: The Budibase Automation Bypass
A newly disclosed Budibase SSRF issue shows why outbound HTTP protection cannot live in one integration while automation steps call fetch directly. The real failure is architectural: security controls that are opt-in, inconsistent, and easy for new features to bypass.
Aug 15, 2026 · 9 min
AutomationBullMQ, Socket.io, and Webhooks Done Right: What NodeFlow Gets (and What It Could Add)
A deep-dive into NodeFlow's async job orchestration platform: the process separation, Redis-backed WebSockets, HMAC webhooks, and circuit breaker patterns that every engineer should understand—plus the security and reliability tweaks I'd add before production.
Jul 6, 2026 · 11 min