Escaping a user-supplied string for use in a pattern, implemented from a Stack Overflow answer in every project since 2011. Four copies of a security-relevant one-liner, three of…
A single sign-on bridge that read the stored hash and compared it, which stopped working when the algorithm changed. The comparison had never worked and the fallback path…
A function that throws synchronously before returning a promise, and a caller whose .catch() never runs. A function that sometimes throws and sometimes returns a promise has two…
A plan output that had grown to four hundred lines for a two-resource change, mostly from a provider that reports every computed attribute. The JSON plan has been…
Cursor pagination keyed on a monotonic id, and a new sort option that broke the guarantee it relied on. Any cursor needs a total order and a non-unique…
One file with eleven services, of which four run in production, three run locally and four run in both with different settings. The override file being loaded automatically…
An index created for a reporting query, and the report replaced by a projection four weeks afterwards. An index nobody reads costs write throughput and buffer pool on…
6.8 prefetches links on hover by default, which is free performance except where a link has a side effect. A GET request that changes state is the anti-pattern…