sh03
banner
sh03.dev
sh03
@sh03.dev
🇮🇹 Software Dev. Primarily: Typescript, React, 🐘 PostgreSQL.
🤌
Oh yeah the last point is very very important
December 14, 2025 at 4:06 PM
The solution to the first scenario is that we should also install a way to disable the system, but then the police is notified and it will have to be justified in court as to why you disabled the system. Otherwise automatic fine.
December 14, 2025 at 8:52 AM
The web is destined to be The app platform for the future. Even Steve jobs saw it. Apple can only delay that for so long.
December 13, 2025 at 8:38 PM
And it comes from a place of love, not hate.

The React team is made of very smart people. But smart programmers, especially when grouped together, can be dangerous IME.
December 13, 2025 at 6:48 AM
This is what I mean when I say that React's complexity is rising at an alarming rate.
December 13, 2025 at 6:48 AM
So now you have:
- "use client", non hook, non async functions
- "use client", non hook, async functions
- "use client", hook, non async functions
- "use server", non hook, non async functions
- "use server", non hook, async functions
- "use server", hook, non async functions
December 13, 2025 at 6:48 AM
React 19 introduced React Server Components. In particular the split between "use client" and "use server" basically created a whole different context and set of rules for each of the previous 3 colors of functions.
December 13, 2025 at 6:48 AM
React 16.8 introduced green functions: hooks. Hooks have their own set of rules for how they work and when they can be used.
December 13, 2025 at 6:48 AM
JS has red/blue functions (journal.stuffwithstuff.com/2015/02/01/w...).
December 13, 2025 at 6:48 AM
Everybody understands that.

It's the mix of "unnecessary magic" AND security vulnerabilities that pisses us off. Coupled with a vague sense that RSC's complexity was created for Vercel and Next.JS. That React is becoming increasingly complex for little to no gain while ignoring actual issues.
December 12, 2025 at 12:34 PM
Reposted by sh03
We disclosed two new RSC vulnerabilities:
- Denial of Service (High): CVE-2025-55184
- Source Code Exposure (Medium): CVE-2025-55183

Patches are available now, please update immediately.

react.dev/blog/2025/12...
Denial of Service and Source Code Exposure in React Server Components – React
The library for web and native user interfaces
react.dev
December 11, 2025 at 8:51 PM
It seems as though I need to go through one test at a time. It just cannot reliably come up with good tests based on the implementation. I've just realized there's a whole batch of other cases we need to test.
December 10, 2025 at 8:53 AM
Third round: it used parameterized tests (which is good) until now. But then for one of the tests it included multiple parameters in the same test (adding assertions, then changing parameters, more assertions, etc.). Why? 🤔
December 10, 2025 at 8:51 AM
After listing all the combination of cases it should test, it managed to make it to 50%.

I'll try to repeat the missing 50%. 🤞
December 10, 2025 at 8:51 AM
I've added a non trivial GraphQL query that I want to test. There are a lot of variables and edge cases involved (essential complexity).

It "thought" for like 5/10 minutes just to give me the most basic tests ever. Uber surface level. It's not even testing 5% of the query.
December 10, 2025 at 8:42 AM
December 5, 2025 at 7:38 AM
query planner was trained by Mike Tyson himself
December 4, 2025 at 11:02 PM
damn! the alt text reads like an erotic novel
December 2, 2025 at 6:15 PM
And once again UI/UX "experts" are looking at all the usability and accessibility issues of liquid glass and nodding in unison.
December 2, 2025 at 12:19 PM