An LRU cache on the CORS proxy stores recent WordPress API responses, reducing load on WordPress sites and improving response times for repeat requests.
Category: Uncategorized
-
Rate Limiting
Built-in rate limiting protects both the CORS proxy and WordPress sites from excessive requests, with clear feedback when limits are reached.
-
DNS Security
The CORS proxy validates target URLs against DNS pinning rules, preventing SSRF attacks by blocking requests to private IP ranges and internal networks.
-
WordPress REST API
The app fetches posts using the standard WordPress REST API with the _embed parameter, pulling titles, excerpts, featured images, and dates in a single request.
-
Shopify App Bridge
The admin dashboard integrates seamlessly with Shopify’s interface using App Bridge, providing a native look and feel for merchant configuration.
-
Zero Server Dependency
Storefront rendering happens entirely client-side. If the app backend goes down, blog posts continue displaying on the store without interruption.
-
Theme Editor Integration
Merchants configure everything through Shopify’s native theme editor including WordPress URL, post count, and display options with no code required.
-
Free and Pro Tiers
The free plan displays up to 3 posts with a subtle branding link, while the Pro plan at $4.99 per month unlocks up to 12 posts with no branding.
-
Featured Images
Each blog card prominently displays the WordPress featured image with a 16:9 aspect ratio, lazy loaded via IntersectionObserver for optimal performance.
-
Skeleton Loading
While posts load, visitors see animated shimmer placeholders that match the final card layout, providing a smooth perceived performance experience.