Skip to content
360SOFTY
HomeInsights

Insights

Ideas for building
better software.

Engineering perspectives on architecture, product development, AI, and the everyday decisions behind useful software.

From the engineering desk

Browse practical articles or follow the latest technology updates.

Subscribe via RSS →

Curated links from external sources — not 360Softy original articles.

ExternalCloud
Cloudflare Changelog

WAF - WAF Release - 2025-05-05

This week's analysis covers five CVEs with varying impact levels. Four are rated critical, while one is rated high severity. Remote Code Execution vulnerabilities dominate this set. Key Findings GFI KerioControl (CVE-2024-52875) contains an unauthenticated Remote Code Execution (RCE) vulnerability that targets firewall appliances. This vulnerability can let attackers gain root level system access, making this CVE particularly attractive for threat actors. The SonicWall SMA vulnerabilities remain

WAF
Cloudflare ChangelogRead original
ExternalFrontend Development
Vercel Blog

How v0 is building SEO-optimized sites by default

Building for the web goes beyond speed and aesthetics, discoverability matters just as much. While AI can accelerate web development, it often skips over performance, accessibility, or SEO best practices that matter for discoverability. With , you don’t have to compromise. Every interface you generate is fast, accessible, and SEO-optimized by default.v0 v0 integrates with Next.js and deploys to Vercel, giving you structured metadata, performance tuning, and (SSR). The result is better , pages t

Vercel BlogRead original
ExternalFrontend Development
Vercel Blog

Information disclosure in Flags SDK (CVE-2025-46332)

Vercel discovered and patched an information disclosure vulnerability in the , affecting versions:Flags SDK This is being tracked as . .CVE-2025-46332We have published an automatic mitigation for the default configuration of the Flags SDK on Vercel We recommend upgrading to (or migrating from to ) to remediate the issue. Further guidance can be found in the [email protected]@vercel/flagsflagsupgrade guide A malicious actor could determine the following under specific conditions: Flags providers wer

Vercel BlogRead original
ExternalFrontend Development
Vercel Blog

Serve personalized content faster with Vary support

Vercel now fully supports the HTTP header, making it easier to cache personalized content across all plans with no configuration required.Vary The header tells caches which request headers to include when generating cache keys. This allows Vercel’s application delivery network to store and serve different versions of a page based on headers like or , so users get fast, localized content without recomputation.VaryX-Vercel-IP-CountryAccept-Language By returning the above headers your site cache

Vercel BlogRead original
ExternalMobile Development
Apple Developer News

Updated guidelines now available

The App Review Guidelines have been updated for compliance with a United States court decision regarding buttons, external links, and other calls to action in apps. These changes affect apps distributed on the United States storefront of the App Store, and are reflected in updates to Guidelines 3.1.1, 3.1.1(a), 3.1.3, and 3.1.3(a). View the App Review Guidelines Translations of the guidelines will be available on Apple Developer website within one month.

Apple Developer NewsRead original
ExternalFrontend Development
Vercel Blog

iOS developers can now offer commission-free payments on web

Yesterday, a federal court made a decisive ruling in Epic Games v. Apple: Apple violated a 2021 injunction by continuing to restrict developers from linking to external payment methods, and by imposing a 27% fee when they did. The ruling represents a major shift for native app developers. Read more

Vercel BlogRead original
ExternalFrontend Development
Vercel Blog

Create custom WAF rules directly from the Vercel Firewall tab

You can now create directly from the chart displayed on the Firewall tab of the Vercel dashboard.custom WAF rules When viewing your traffic grouped by a parameter (like IP address, user agent, or request path), you can now select "Create Custom Rule" within the actions menu of any displayed time series. This automatically generates an editable draft of the custom WAF rule that matches the selected parameter. Once the WAF rule is saved and published, it's immediately propagated across our globa

Vercel BlogRead original

Let’s start with a conversation

Tell us what you’re working on.

An idea, a challenge, or a system that needs to work better. We’ll help you understand the next step.

Discuss your project

Prefer email? [email protected]