/Cinny
new software development rule
if you get an RCE you delete your raccodebase and start over from scratch
/Cinny
server side rendering in theory: server sends client an html file with the raccontent
server side rendering in practice: racclient can just send raccode to the server, and it’ll just execute it ?????
/Cinny
log4shell? you added a dedicated rce formatting string to a parameter you did not verify raccame from a trusted source. punishment: delete your repo