Enable built-in .NET 11 MemoryCache metrics, export cache hits, misses, evictions, entries, and estimated size through OpenTelemetry, and avoid misleading dashboards.
If your production applications are still running on .NET 8 or .NET 9, there is a date worth putting on…
Enable built-in .NET 11 MemoryCache metrics, export cache hits, misses, evictions, entries, and estimated size through OpenTelemetry, and avoid misleading dashboards.
Use .NET 11 TryParsePartial to build a strict, allocation-conscious delimited number parser that rejects malformed boundaries and reports useful failures.
Add a post-build CI guard that verifies every local file referenced by Angular’s generated service-worker manifest across SSR and localized browser artifacts.
Use Angular 22 injectAsync for genuinely optional services, avoid eager imports that collapse the split, choose a prefetch trigger, and verify the production bundle and network behavior.
Angular 22 OnPush behavior creates a migration split that is easy to…
Three Angular security advisories affect SSR rendering, HttpTransferCache, and localized event-handler attributes. Learn which versions are vulnerable and how to audit and patch production applications.
Angular 22 Zoneless Reactive Forms can expose a subtle UI problem: the…
Build an accessible Angular loading spinner that handles concurrent HTTP requests, errors, cancellation, opt-outs, and verification without hiding early.
Make the Key Vault authorization model explicit in Bicep, deploy the workload’s data-plane role, and verify secret access before a successful deployment hides a production 403.
A reusable HttpClient service in ASP.NET Core should make the caller’s identity…
Use the Microsoft Entra on-behalf-of (OBO) flow when an authenticated client calls…
Secure .NET 8 service-to-service API calls with Microsoft Entra client credentials, app roles, least privilege, safer production credentials, and practical failure-path verification.
Secure a .NET 8 Blazor Server app with Microsoft Entra ID, OpenID Connect, authorization policies, safe credentials, and reliable authentication state.
Secure Swagger UI with Microsoft Entra ID using authorization code flow with PKCE, delegated scopes, and ASP.NET Core token validation.
Fix BL0012 through BL0016 with production-focused component patterns, narrow suppressions, CI enforcement, and behavior checks for rendering, authentication, closures, and JavaScript interop.
Latest
Use the new Microsoft.Extensions.AI routing and failover primitives without promising impossible mid-stream recovery, and place the router correctly around tool-calling loops.
Make the Key Vault authorization model explicit in Bicep, deploy the workload’s data-plane role, and verify secret access before a successful deployment hides a production 403.
ASP.NET Core 10 passkeys can be added to existing Identity accounts without forcing an immediate passwordless migration. The safest approach…