Development
Notes for developers extending or embedding Core Forms: hooks, headless setups and debugging.
3 articles
-
Hidden Fields in HTML Forms: Useful Data, Not Trusted Data
Learn safe uses for hidden fields in HTML forms, what attackers can change, and which values must be verified on the server.
Read → -
Webhook Retries and Idempotency: Prevent Duplicate Actions
Make webhook retries safe with event IDs, idempotent receivers, exponential backoff, fast acknowledgments, action logs, and replay controls.
Read → -
Webhook Signature Verification With HMAC-SHA256
Implement webhook signature verification with HMAC-SHA256, raw request bodies, timestamp checks, constant-time comparison, and secret rotation.
Read →
Stop reading. Ship a form.
All these notes are from running Core Forms on real client sites. Use code
CFLAUNCH for 20% off either plan.