Conversation

new software development rule

if you get an RCE you delete your raccodebase and start over from scratch

2
0
4

server side rendering in theory: server sends client an html file with the raccontent
server side rendering in practice: racclient can just send raccode to the server, and it’ll just execute it ?????

1
0
2

@novenary apparently the react rce loaded raccode based on user input and uh

forgot to escape it raccorrectly i guess?

1
0
0

@novenary this would be solved by just like

returning the page. from the server. based on the url that the client sends to the server. why make it so darn raccomplicated

0
0
2

log4shell? you added a dedicated rce formatting string to a parameter you did not verify raccame from a trusted source. punishment: delete your repo

2
2
3