(react.dev)

298 points sangeeth96 | 1 comments | 11 Dec 25 20:46 UTC | HN request time: 0.208s | source

See also: https://blog.cloudflare.com/react2shell-rsc-vulnerabilities-..., https://nextjs.org/blog/security-update-2025-12-11

Show context

chuckadams ◴[11 Dec 25 21:06 UTC] No.46237166[source]▶

>>46236924 (OP) #

I remember when the point of an SPA was to not have all these elaborate conversations with the server. Just "here's the whole app, now only ask me for raw data."

replies(7): >>46237234 #>>46237514 #>>46237562 #>>46237703 #>>46237856 #>>46238657 #>>46239228 #

1. hedayet ◴[11 Dec 25 22:03 UTC] No.46237856[source]▶

>>46237166 #

I'd be interested in adopting a sole-purpose framework like that.

↑

Denial of service and source code exposure in React Server Components