Skill UI

This guide details how to install and configure the WebContainer API, enabling client-side Node.js execution directly in the browser. It also provides instructions for integrating the StackBlitz SDK, which is used for embedding highly interactive code editors into web applications. The guide covers necessary dependency installations, code examples, and crucial HTTP header configuration (COOP/COEP) required for cross-origin isolation and secure operation.

Provides a comprehensive production checklist specifically for WebContainer applications built using the StackBlitz SDK. This guide helps developers ensure that their web applications are robust and ready for deployment by checking essential aspects like security headers, cross-browser compatibility, and necessary fallback mechanisms.

This comprehensive guide teaches how to use httpYac in VSCode to convert API documentation (like Swagger or Postman collections) into robust, executable .http files. It provides advanced workflow guidance for implementing complex authentication schemes (OAuth2, Bearer), managing multi-environment configurations, chaining requests using response data, and integrating testing workflows with CI/CD pipelines for professional-grade API automation.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

This guide provides a comprehensive reference for diagnosing and fixing common Webflow Data API v2 HTTP errors (400, 401, 403, 404, 409, 429, 500). It covers the root causes and offers concrete code solutions in TypeScript and Bash for issues like invalid tokens, insufficient scope, or rate limits, helping developers effectively troubleshoot failed Webflow integrations and ensure data flow stability.

A comprehensive guide to implementing production-ready patterns for the Webflow SDK. Covers essential architectural patterns such as singleton client management, robust typed error handling (including specific HTTP status codes like 401, 403, 429), efficient pagination helpers, rate limit monitoring via raw response access, and multi-tenant client factory setup. Essential for building scalable, enterprise-grade Webflow integrations.

Add custom HTTP endpoints (GET, POST, PUT, etc.) to the Webiny API alongside the GraphQL handler using <Api.Route> and HttpRouteHandler, with full dependency injection support.

A robust application framework for Go that combines a reflection-based Dependency Injection container (built on dig) with advanced features. It provides lifecycle hooks (OnStart/OnStop), a module system, and signal-aware run loops. It is ideal for building complex, long-running services like HTTP servers, daemons, and workers that require structured startup and graceful shutdown.

A comprehensive playbook for bypassing 401/403 Forbidden errors. Covers advanced techniques like path normalization tricks (encoding, traversal), HTTP method tampering, IP spoofing headers, and protocol downgrade attacks. Essential knowledge for penetration testing and security auditing.

A detailed playbook covering CRLF (Carriage Return Line Feed) injection techniques. This exploit targets insecure handling of user input within HTTP response headers (e.g., Location, Set-Cookie) or log files. It demonstrates advanced attacks like response splitting, XSS escalation via double CRLF, cache poisoning, and session fixation, essential for deep security testing.

A sophisticated payload bypass technique targeting Java applications. It exploits the silent loss of high 8 bits when 16-bit Java characters are cast or written as 8-bit bytes. This allows attackers to bypass WAF/IDS security measures by making the WAF see harmless Unicode, while the backend service processes the original malicious ASCII byte payload. Ideal for blind SQLi, deserialization RCE, and path traversal. This primitive affects major frameworks like Tomcat, Spring, Jackson, and HttpClient.

A comprehensive playbook detailing how web applications can be vulnerable to attacks by manipulating the HTTP Host header. Covers critical techniques such as password reset poisoning, Web Cache Poisoning, Server-Side Request Forgery (SSRF), and Virtual Host bypass. Essential reading for penetration testers and security researchers.