Owner-Operator::Risk-Inheritor

Fun aspect of building and maintaining my own website stack is that I own the security and maintenance cycle of my system. Classic problem with avoiding frameworks is I now own all of the mundane, framework-decisions I otherwise wouldn't make with something like Laravel. "How am I going to defend against XSS Attacks?" "Why do I care about Cookies?" I spend a fair amount of time doing my own due diligence after having built everything!

Part of the problem with the web prior to ~2023 is that figuring this stuff out meant knowing how to ask about them specifically. You needed to know there was such a thing as CSRF policy, and that there were people out using these things called iframes that can be used to spoof your site. Anyway, I spent the last week or so learning these things and figuring out how and why certain security headers exist haha!

If anything breaks really crazy it's because my content policies have shifted pretty aggressively. You have been warned.