Denial of service and source code exposure in React Server Components

Re:Denial of service and source code exposure in React Serve... by joshdavham on Thursday December 11, 2025 @10:37PM (#46240620)

I'm no javascript framework expert, but how vulnerable do people estimate other frameworks like Angular, Sveltekit and Nuxt to be to this sort of thing? Is React more disposed to be at risk? Is it just because there are more eyes on React due to its popularity?

[ Parent | on HN ]

Re:Denial of service and source code exposure in React Serve... by rk06 on Thursday December 11, 2025 @10:53PM (#46240714)

nuxt, sveltekit etc don't have RSC equivalent. and won't have in future either. Vue has discussed it and explicitly rejected it. also RSC was proposed to sveltekit, they also rejected it citing public endpoint should not be hidden

they may get other vulnemerelities as they are also in JS, but RSC class vulelnebereleties won't be there

[ Parent | on HN ]

Re:Denial of service and source code exposure in React Serve... by rk06 on Friday December 12, 2025 @06:22AM (#46243072)

please forgive typos in above comment. i can no longer edit them

[ Parent | on HN ]

Re:Denial of service and source code exposure in React Serve... by joshdavham on Friday December 12, 2025 @12:04PM (#46246054)

Haha don’t sweat it dude. Happens to literally everyone on HN.

[ Parent | on HN ]