Hacker News new | ask | show | jobs
by rvnx 176 days ago
It is not as cool as the RPC exploit of React/Next.js where you could call any function on the server-side including “vm.sysexec” or whatever it was, but still not to be fully ignored