zlacker

Next.js/RSC has become the new PHP :)

I guess now we'll see more bots scanning websites for "/_next" path rather than "/wp-content".

>>_el1s7+(OP)
Inevitable when the line between the client and the server is blurred this much. RCE in a UI library is not a phrase you hear often.

>>ivanje+LJ
Maybe one day we'll look back at JavaScript and conclude it was a gigantic mistake ship unaudited executable code to a few billion people every day.

>>_el1s7+(OP)
I have seen a number of attempts at exploiting this on our deployment already. Luckily I saw and was able to apply the patch last night, but as a European, it wasn't great to only get the announcement after dinner time.

>>jacque+wV
JavaScript is fine, it's what and how people build with it that's the problem. It was never meant to be a systems language but we're desperate to make it one.

>>rglove+Ef2
In light of this discussion:

>>46141771

that is an interesting observation.