1. Frontend & Experience Architecture advanced

    A product manager asks why the app feels slower on Android than on iOS when it is the same web application. Walk me through what you investigate and what you tell them.

    3 min answer device-classperformancefield-datamain-thread
  2. Frontend & Experience Architecture advanced

    In 2015 Flipkart built Flipkart Lite as a progressive web app after a period of pushing users to its native app. The published case study on web.dev reports time on site rising from about 70 seconds to about 3.5 minutes with 3x lower data usage and 63% of those users arriving over 2G. What problem forced the decision what did it actually buy and where would copying it be a mistake?

    2 min answer flipkartprogressive-web-appreachdevice-class
  3. Frontend & Experience Architecture intermediate

    What decides whether a product should render on the server or the client?

    2 min answer renderingperformancedevicesseo
  4. Frontend Security advanced

    A consent-management script is loaded synchronously in the document head from a vendor domain because no non-essential tag may run before consent. The vendor's edge degrades to a p99 of 8 seconds rather than returning errors. Walk through what happens second by second what the user sees and what stops it.

    3 min answer third-party-scriptsconsentparser-blockingavailability
  5. Frontend Security advanced

    A financial application runs substantial logic in the browser. What must never be trusted, and what protections are architectural?

    2 min answer growwfrontend-securityvalidationtokens
  6. Frontend Security advanced

    Design the browser-side security posture for an application handling sensitive user files.

    2 min answer frontend-securitycspxsstokens
  7. Frontend Security advanced

    In October 2020 the ICO fined British Airways 20 million pounds over its 2018 breach, in which a modified third-party script on payment pages sent customer card details to an attacker-controlled host, affecting over 400,000 customers. A team proposes a strict nonce-based content security policy in response. What does that buy, what does it cost, and what does it not cover?

    3 min answer cspnoncemagecartthird-party-scripts
  8. Frontend Security advanced

    Marketing wants a new tag manager script on the checkout page. Security objects. Who is right and what do you propose?

    2 min answer supply-chainsecuritybrowser
  9. Hydration Cost advanced

    A marketplace's pages paint quickly and feel unresponsive for several seconds after appearing. What is happening and how do you fix it?

    1 min answer hydrationinteractivityjavascriptperformance
  10. Hydration Cost advanced

    A page renders quickly and is unresponsive to input for several seconds on a low-end device. What is happening?

    2 min answer meeshohydrationinteractivityjavascript
  11. Hydration Cost advanced

    A page renders quickly but is unresponsive for several seconds after appearing. What is happening, and what are the architectural responses?

    2 min answer hydrationinteractivityjavascriptislands
  12. Hydration Cost advanced

    A server-rendered page uses islands: static HTML with independently hydrated interactive components. In production, one island's hydration throws because a third-party script mutated the DOM before React attached. What does the user see, and what stops it?

    3 min answer hydrationislandserror-boundariesthird-party