undefined | Better HN

0 pointscluckindan6mo ago0 comments

”use server” is not required for this vulnerability to be exploitable.

0 comments

3 comments · 1 top-level

sysguest6mo ago· 2 in thread

wait I'm only using React for SPA (no server rendering)

am I also vulnerable??????

Only if you are running a vulnerable version of Next.js server.

No, unless you run the React Server Component runtime on your server, which you wouldn't do with a SPA, you would just serve a static bundle.

j / k navigate · click thread line to collapse