Article
Jul 20, 2026· 5 min
Draft previews that do not leak
Hash the token, never the entity id in the URL, and fail closed on expiry.
- Engineering
Blog
Published articles from the CMS.
Hash the token, never the entity id in the URL, and fail closed on expiry.
Trash retention, typed confirmations, and why hard delete should feel expensive.