Hacker News new | ask | show | jobs
by cluckindan 190 days ago
”use server” is not required for this vulnerability to be exploitable.
1 comments
sysguest 190 days ago
wait I'm only using React for SPA (no server rendering)

am I also vulnerable??????

link
cluckindan 190 days ago
Only if you are running a vulnerable version of Next.js server.
link
__jonas 189 days ago
No, unless you run the React Server Component runtime on your server, which you wouldn't do with a SPA, you would just serve a static bundle.
link