Comments by "Luther T.S." (@LutherDePapier) on "React's most dangerous feature" video.

  1. I've heard this before, the issue is that users need to be authenticated on every action. How is that not the most basic server-side best practice every developer should already know about?
    3
  2. I mean for real, actions in React 19 are like actions in Remix. They're basically an endpoint anyone can hit if they know the endpoint. If you have a route called /create in Remix anyone can type /create in the URL. It's up to you as a developer to always authenticate on the action itself before doing anything else, even if there already is some middleware auth somewhere else in the project. So I really don't see what the issue is here.
    2
  3. "Web developers aren't used to dealing with access control." So all this is is a skill issue. Noted.
    1
  4. ...And Ryan Florence is 100% right on this.
    1