98
React2Shell: maximum severity vulnerability discovered in React (www.tenable.com)
submitted 11 months ago by to c/programming@programming.dev
8 comments fedilink hide all child comments
 

I got an email from Vercel urging to upgrade Next.js based project 3 days ago. POC was published 2 days ago. Today I've checked my logs and I could already see attack attempts.

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 11 months ago (1 child)

Now, most people use, or at least are recommended to use, SSR/RSC these days.

Why though?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 11 months ago

    I'm not the one recommending it lol.

    If I had to guess, it's to improve page performance by prerendering as much as possible, but I find it overkill and prefer to just prerender as much of the page as I can at build time and do CSR for the rest, though this doesn't work if you have dynamic routes or some kind of server-side logic (good for blogs and such though).

  • permalink
  • fedilink
  • source
  • parent