Responding to an Exposed Google API Key in a Git RepositoryLearn how to remediate an exposed Google API key by rotating credentials, applying restrictions, cleaning Git history, and implementing secret scanning.4 min read·cruxtab-technologies.hashnode.devOct 31
Preventing HTML Injection in Email Notifications Generated from Form SubmissionsLearn how to prevent HTML injection in form notification emails by escaping customer answers and safely rendering untrusted content.3 min read·cruxtab-technologies.hashnode.devOct 31
Securing Shopify Form Submissions Against Spam and Automated AbuseLearn how to protect Shopify form submissions with rate limiting, honeypots, server-side validation, file checks, and trusted request metadata.4 min read·cruxtab-technologies.hashnode.devOct 31
Protecting Third-Party API Credentials in Shopify Form Builder MetafieldsLearn how to protect reCAPTCHA, Mailchimp, Klaviyo, HubSpot, Brevo, and Google service-account credentials by separating private secrets from storefront metafields.3 min read·cruxtab-technologies.hashnode.devOct 31
Preventing Cross-Shop Data Leaks in Multi-Tenant Shopify ApplicationsLearn how to prevent cross-shop data exposure by using authenticated Shopify sessions, enforcing tenant-scoped database queries, and testing authorization.3 min read·cruxtab-technologies.hashnode.devOct 31
