Duck Cloud Blog
Tutorials, SEO-friendly explainers, and step-by-step articles that link directly to the tools they describe.
Data Engineering
Test PostgreSQL row-level security with the application role, read and write policies, negative tenant cases, and pool behaviour before trusting isolation.
Oct 4, 2026
Read nowSecurity Defence
Prevent prototype pollution with reviews of dynamic writes, explicit schemas, and merge tests instead of assuming parsed JSON is safe application configuration.
Oct 4, 2026
Read nowWeb Infrastructure
Roll out CSP report-only mode with a script inventory, protected reporting, browser tests, and deliberate enforcement instead of a rushed header change.
Oct 4, 2026
Read nowSecurity Defence
Review domains by inspecting the actual hostname, Unicode code points, and encoded representation without treating visual similarity as proof of identity.
Oct 4, 2026
Read nowSecurity Defence
Reduce CSV formula injection risk by separating spreadsheet exports from raw data, testing risky cell prefixes, and using explicit text types when supported.
Oct 4, 2026
Read nowSecurity Defence
Prevent SSRF in URL fetchers with destination policy, redirect checks, bounded responses, and network restrictions rather than merely trusting a parsed URL.
Oct 4, 2026
Read nowSecurity Defence
Protect state-changing requests with CSRF tokens, origin checks, and SameSite policy instead of assuming one cookie attribute covers every browser workflow.
Oct 4, 2026
Read nowSecurity Defence
Offboard users with an access inventory, session checks, automation transfer, and negative tests so disabling one account is not mistaken for completion.
Oct 4, 2026
Read nowSecurity Defence
Design passkey recovery with multiple access paths, protected credential changes, clear notifications, and lost-device tests rather than an improvised fallback.
Oct 4, 2026
Read nowSecurity Defence
Review GitHub Actions event triggers, checkout sources, artifacts, and runner permissions so untrusted pull-request code cannot inherit deployment privileges.
Oct 4, 2026
Read nowDeveloper Workflows
Use GitHub Actions OIDC with verified claims, narrow roles, and environment checks so removing static secrets does not create overly broad deployment trust.
Oct 4, 2026
Read nowWeb Infrastructure
Troubleshoot R2 presigned URLs by checking method, signed headers, expiry, and browser CORS while treating the URL as temporary access to a specific object.
Oct 4, 2026
Read now