sami

tldr; untrusted input is the devi

there’s nothing wrong with a more traditional/boring client -> server pattern because it works, it’s familiar, and the security concerns are well established

does it take away from some of the “magic” of the rsc implementation in next’s app router? yes

was Pages router completely unaffected by these CVEs? also yes

turns out if you just don’t trust client input you lower your attack surface dramatically (shocker)

in this framework you can ‘use client’ but flight protocol never goes to the server (eg. ‘use server’ directive in client components)

the big difference is that it never deserializes flight protocol on the server, it exclusively just serializes flight protocol for clients. also it only supports api endpoints similar to next’s pages router instead of server actions like the app router

I also like the rsc paradigm

I just finished an MVP of an React 19/RSC based framework and to my surprise because of how I decided to implement things, the framework wasn’t impacted at all by any of the recent React CVEs

💯💯💯

I didn’t think grifters could ruin an entire technology, but here we are

do whatever feels natural, whatever clicks for you

# list only directories, 2 level limit, ignore node alias tr="pwd && tree -d -L 2 -I node_modules"

sometimes i prefer a new command, like how i usually use tree:

you can just put a bash function in your ~/.zshrc that leaves all the OG functionality alone, but let's you use whatever keyword you want for your own subcommand

adding subcommands to docker because why not

# name default branch $ git config --global init.defaultBranch main # auto setup remote so "git push" just works $ git config --global push.autoSetupRemote true

today i learned i can just add a new subcommand to git to do whatever I want. this feels illegal but i love it

# add new git subcommand for finding any directories # that already contain a git repo git config --global alias.find '!find . -name ".git" -type d' # run new subcommand git find

reskeeting this for later

that would explain the inflated price perfectly

would be interesting to know if the contract went to someone with ucp connections

they barely got above 60% of the vote

1/3 of voters in Alberta didn’t vote conservative

i know this looks bad, but hear me out lol

how does that idiot explain the unmarked graves of thousands of children??

why weren’t families notified if everything was consensual & A-OK?

MAGA North has already infected the conservative party

it’s only a matter of time before it’s a full take over and they start openly siding with Americans on policy. for now it’s just dog whistling and flirting

see: Danielle Smith

this why i switched to pnpm

lol

suiting up like iron man has is the only hope against this 🥶

Calgary -27° Cloudy H:-22° L:-28°

we don’t have earthquakes
we don’t have hurricanes
we don’t have alligators

I have been boycotting this jackass and any Shopify companies since its inception. I highly recommend you do the same. He allows neo-nazi’s to sell merchandise on their platform. He caters to them. Do better.