1. Frontend Security advanced

    A consent-management script is loaded synchronously in the document head from a vendor domain because no non-essential tag may run before consent. The vendor's edge degrades to a p99 of 8 seconds rather than returning errors. Walk through what happens second by second what the user sees and what stops it.

    3 min answer third-party-scriptsconsentparser-blockingavailability
  2. Frontend Security advanced

    A financial application runs substantial logic in the browser. What must never be trusted, and what protections are architectural?

    2 min answer growwfrontend-securityvalidationtokens
  3. Frontend Security advanced

    Design the browser-side security posture for an application handling sensitive user files.

    2 min answer frontend-securitycspxsstokens
  4. Frontend Security advanced

    In October 2020 the ICO fined British Airways 20 million pounds over its 2018 breach, in which a modified third-party script on payment pages sent customer card details to an attacker-controlled host, affecting over 400,000 customers. A team proposes a strict nonce-based content security policy in response. What does that buy, what does it cost, and what does it not cover?

    3 min answer cspnoncemagecartthird-party-scripts
  5. Frontend Security advanced

    Marketing wants a new tag manager script on the checkout page. Security objects. Who is right and what do you propose?

    2 min answer supply-chainsecuritybrowser
  6. Hydration Cost advanced

    A marketplace's pages paint quickly and feel unresponsive for several seconds after appearing. What is happening and how do you fix it?

    1 min answer hydrationinteractivityjavascriptperformance
  7. Hydration Cost advanced

    A page renders quickly and is unresponsive to input for several seconds on a low-end device. What is happening?

    2 min answer meeshohydrationinteractivityjavascript
  8. Hydration Cost advanced

    A page renders quickly but is unresponsive for several seconds after appearing. What is happening, and what are the architectural responses?

    2 min answer hydrationinteractivityjavascriptislands
  9. Hydration Cost advanced

    A server-rendered page uses islands: static HTML with independently hydrated interactive components. In production, one island's hydration throws because a third-party script mutated the DOM before React attached. What does the user see, and what stops it?

    3 min answer hydrationislandserror-boundariesthird-party
  10. Internationalisation advanced

    A commerce platform expands across markets with different languages, scripts, currencies and layout directions. What breaks that teams do not anticipate?

    1 min answer i18nrtllocalisationformatting
  11. Micro-Frontends advanced

    A company adopts micro-frontends across many teams. Two years later the product is slower, visually inconsistent and harder to change. What went wrong?

    1 min answer micro-frontendscouplingperformancedesign-systems
  12. Micro-Frontends advanced

    A front-end lead proposes micro-frontends so four teams can deploy independently. The application is a single React SPA. What is your assessment?

    2 min answer frontendmicro-frontendscouplingdelivery