sh03
banner
sh03.dev
sh03
@sh03.dev
🇮🇹 Software Dev. Primarily: Typescript, React, 🐘 PostgreSQL.
🤌
"Fa colpo" is more of a "Makes an impression" in this context.
December 24, 2025 at 1:09 PM
And somehow still managed to lose that battle
December 21, 2025 at 2:54 PM
Oh yeah the last point is very very important
December 14, 2025 at 4:06 PM
The solution to the first scenario is that we should also install a way to disable the system, but then the police is notified and it will have to be justified in court as to why you disabled the system. Otherwise automatic fine.
December 14, 2025 at 8:52 AM
The web is destined to be The app platform for the future. Even Steve jobs saw it. Apple can only delay that for so long.
December 13, 2025 at 8:38 PM
And it comes from a place of love, not hate.

The React team is made of very smart people. But smart programmers, especially when grouped together, can be dangerous IME.
December 13, 2025 at 6:48 AM
This is what I mean when I say that React's complexity is rising at an alarming rate.
December 13, 2025 at 6:48 AM
So now you have:
- "use client", non hook, non async functions
- "use client", non hook, async functions
- "use client", hook, non async functions
- "use server", non hook, non async functions
- "use server", non hook, async functions
- "use server", hook, non async functions
December 13, 2025 at 6:48 AM
React 19 introduced React Server Components. In particular the split between "use client" and "use server" basically created a whole different context and set of rules for each of the previous 3 colors of functions.
December 13, 2025 at 6:48 AM
React 16.8 introduced green functions: hooks. Hooks have their own set of rules for how they work and when they can be used.
December 13, 2025 at 6:48 AM
JS has red/blue functions (journal.stuffwithstuff.com/2015/02/01/w...).
December 13, 2025 at 6:48 AM
Everybody understands that.

It's the mix of "unnecessary magic" AND security vulnerabilities that pisses us off. Coupled with a vague sense that RSC's complexity was created for Vercel and Next.JS. That React is becoming increasingly complex for little to no gain while ignoring actual issues.
December 12, 2025 at 12:34 PM
Reposted by sh03
We disclosed two new RSC vulnerabilities:
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183

Patches are available now, please update immediately.

react.dev/blog/2025/12...
Denial of Service and Source Code Exposure in React Server Components – React
The library for web and native user interfaces
react.dev
December 11, 2025 at 8:51 PM
It seems as though I need to go through one test at a time. It just cannot reliably come up with good tests based on the implementation. I've just realized there's a whole batch of other cases we need to test.
December 10, 2025 at 8:53 AM
Third round: it used parameterized tests (which is good) until now. But then for one of the tests it included multiple parameters in the same test (adding assertions, then changing parameters, more assertions, etc.). Why? 🤔
December 10, 2025 at 8:51 AM