<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Best Practices on Dev Toolkit</title><link>https://wen.yunshangtool.cn/tags/best-practices/</link><description>Recent content in Best Practices on Dev Toolkit</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sat, 06 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://wen.yunshangtool.cn/tags/best-practices/index.xml" rel="self" type="application/rss+xml"/><item><title>TypeScript Best Practices for Production Applications</title><link>https://wen.yunshangtool.cn/posts/typescript-best-practices/</link><pubDate>Sat, 06 Jun 2026 00:00:00 +0000</pubDate><guid>https://wen.yunshangtool.cn/posts/typescript-best-practices/</guid><description>TypeScript has become the standard for serious JavaScript projects. Here are practical tips for making your TypeScript codebase robust and maintainable.
Strict Mode: Always enable &amp;quot;strict&amp;quot;: true in tsconfig.json. This enables all strict type-checking options and catches more errors at compile time.
Discriminated Unions: Use discriminated unions for complex state management instead of optional properties:
type State = | { status: &amp;#39;loading&amp;#39; } | { status: &amp;#39;success&amp;#39;; data: Data } | { status: &amp;#39;error&amp;#39;; error: Error }; Utility Types: Master Partial&amp;lt;T&amp;gt;, Required&amp;lt;T&amp;gt;, Pick&amp;lt;T&amp;gt;, Omit&amp;lt;T&amp;gt;, Record&amp;lt;K,V&amp;gt; to write concise, maintainable types.</description></item><item><title>Web Application Security Checklist for Developers</title><link>https://wen.yunshangtool.cn/posts/web-security-checklist/</link><pubDate>Fri, 22 May 2026 00:00:00 +0000</pubDate><guid>https://wen.yunshangtool.cn/posts/web-security-checklist/</guid><description>Security is every developer&amp;rsquo;s responsibility. This checklist covers essential steps to protect your web applications.
OWASP Top 10: Familiarize yourself with the OWASP Top 10 vulnerabilities: Injection, Broken Authentication, Sensitive Data Exposure, XML External Entities, Broken Access Control, Security Misconfigurations, Cross-Site Scripting (XSS), Insecure Deserialization, Using Components with Known Vulnerabilities, and Insufficient Logging.
Input Validation: Never trust user input. Validate on both client and server, use parameterized queries to prevent SQL injection, sanitize HTML to prevent XSS, and validate file uploads.</description></item></channel></rss>