Writing 4 notes

#cors proxy

Every note tagged #cors proxy, newest first — or browse the full archive.

June 18, 2026 Art

The Met API has no random button

A year ago I shipped a one-button "random artwork" toy on top of the Met Museum API. It has since grown into a four-screen app — and the interesting part is what you do when the API you're randomizing over has no way to hand you something random. Manufacture it. And once you can manufacture randomness, a deterministic "artwork of the day" falls out for free.

#art#javascript#react#met museum#cors proxy#randomness#pwa
June 15, 2026 Engineering

Hardening the open CORS proxy — allowlists, SSRF guards, and the bypass I almost left behind

A year after building an open serverless CORS proxy, I closed the open-relay hole it had become — target and origin allowlists, SSRF guards, a resilience layer — and learned a sharp lesson about a forgotten debug endpoint that Vercel was still routing.

#cors proxy#serverless#vercel#security#ssrf#javascript#tikz
May 6, 2025 Art

Building a Random Art Generator with the Met Museum API and a Serverless CORS Proxy

Taking a break from science to explore art and technology with a web application that makes the Metropolitan Museum's collection accessible through a custom-built CORS proxy solution.

#art#web development#javascript#met museum#cors proxy#serverless
May 4, 2025 Engineering

Building a Serverless CORS Proxy with Vercel - Simplifying Cross-Origin Requests

A practical exploration of building a serverless CORS proxy using Vercel's serverless functions, offering an elegant solution to the common cross-origin resource sharing challenges faced by frontend developers.

#cors proxy#serverless#vercel#javascript#web development