Posts for tag #security

A malicious request can cause a Server Function to return compiled code from other functions. In our case, that ended up leaking secrets that the bundler had embedded in the output.