I’m so tired.

If you're tired, go rest

Mixing frontend and backend into single files and just praying that the bundler does everything correctly was a mistake from the beginning.

I guess you could say the got... Rehacked

I'm glad react has more security people's eyes on it now at least

there was nothing wrong with having a separate CLIENT side piece of code in a seperate repo, if that wasn’t your flavour just use a monorepo for better DX. Why was there the need to annotate code with a stupid ‘use client/server’ string to decide where it runs. Unless you understand the protocol deeply, respect the separation

This is one of the reasons I don’t use server-side components. Not security _per se_ but the general notion of mixing such different concerns. The front-end is just different from the back-end. The front-end you worry about package-size, versioning, user-experience. The back-end, you worry about cold-starts, efficiency... and security. I used to say teams should use Typescript on the back-end so you get cross-training, code-sharing, and similar benefits. Now I am beginning to wonder if switching to a different language, just to remind people “you are in the back-end now, it’s a different world” might be worth it.

Laughing in Vue…

Sorry but this flight protocol implementation looks like the job of an intern who never heard anything about security at all

Having a little risk in a core framework gives enough of an adrenaline rush that I don’t feel the need to go skydiving❤❤❤

This is the seconds time I update my old project dependencies lol