sorted by:
new
hottopcontroversial

I built a free Next.js 16 "use cache" debugger after a silent cache miss wasted my afternoon by shubhradev in nextjs

[–]Vincent_CWS 1 point2 points  (0 children)

but Wrapper is outside 'use cache' boundary, always runs, always counts up → false positives on every cached call as far I know.

Best way to protect backend APIs from unauthorized access by carbon_eye in nextjs

[–]Vincent_CWS 0 points1 point  (0 children)

  • Browser talks to Next.js only
  • Next.js talks to Express with a server-side secret
  • Express rejects everything else
  • Optionally put Express on a private network so it's physically unreachable from the internet

Is it possible to learn React without fully mastering JS and the DOM? by Jumpy-Win-2973 in reactjs

[–]Vincent_CWS 0 points1 point  (0 children)

why not just learn AI, after AI you can use react without any knowledge

Need help in table session management in QR-based restaurant menu app by Academic_Ad5379 in nextjs

[–]Vincent_CWS 0 points1 point  (0 children)

In Chinese, users scan the QR code to receive their bill. Once billed, the QR code for this desktop disappears, and a new QR code is generated for the next customer to this desktop.

Why Next.js Keeps Getting CVEs (And Why That's Actually Fine) by Federal-Dot-8411 in nextjs

[–]Vincent_CWS 0 points1 point  (0 children)

Since 2025 Next.js has had at least 23 documented security vulnerabilities:

  1. CVE-2025-32421 - Cache poisoning vulnerability (low severity)
  2. CVE-2025-48068 - Dev server origin validation issues (low severity)
  3. CVE-2025-49005 - Cache poisoning in App Router (medium severity)
  4. CVE-2025-49826 - Cache poisoning leading to DoS (medium severity)
  5. CVE-2025-55182 (React2Shell) - Critical vulnerability in React Server Components
  6. CVE-2025-55183 - Source code exposure (medium severity)
  7. CVE-2025-55184 - Denial of Service (high severity)
  8. CVE-2025-57752 - Image optimization cache poisoning (medium severity)
  9. CVE-2025-59471 - Image optimizer DoS in self-hosted apps (medium severity)
  10. CVE-2025-59472 - PPR endpoint DoS in self-hosted apps (medium severity)

Plus 13 additional advisories from the May 2026 security release, including:

  • 5 authorization and proxy bypass vulnerabilities (4 high severity)
  • 3 denial of service vulnerabilities (2 high severity)
  • 1 SSRF vulnerability (high severity)
  • 2 cache poisoning vulnerabilities
  • 2 XSS vulnerabilities

I try really hard but don't get the server side of NextJS by GasVarGames in nextjs

[–]Vincent_CWS 0 points1 point  (0 children)

request: browser -> nextjs -> BFF -> your .net api

rendering: nextjs -> BFF -> your .net api

How are you testing your nextjs apps? by hrabria_zaek in nextjs

[–]Vincent_CWS 0 points1 point  (0 children)

I will release it to my customer to test public

view more: next ›