Next.js’s Security Vulnerability, Remix Walks Away from RSCs, and Rsdoctor 1.0

Front-End Fire

Next.js had a security vulnerability scare last week due to an internal header in its middleware that allowed for skipping middleware (like auth validation) before reaching routes. The Next.js team responded quickly and patched the security holes, but this serves as a reminder to stay vigilant, keep dependencies updated, and implement multiple layers of security.

Michael Jackson, co-founder of Remix and React Router, is calling it quits for Remix support React Server Components. Lots of React-based frameworks built prior to RSCs have been struggling to support the new paradigm shift - and lots of devs have bemoaned the fact because of the added complexity it introduces, and MJ is over it. This isn’t the first time framework authors have made bold claims to not support new breaking changes, so we’ll have to wait and see if he sticks to it.

Rsdoctor, a build analyzer tool by ByteDance, has hit v1.0. Rsdoctor goes beyond other build analysis tools offering a visual view of the build process and smart analysis to help dev teams identify bottlenecks, optimize performance, and improve overall engineering quality.

News:

• Paige - Rsdoctor 1.0 is available now
• Jack - Remix bailing on RSC?
• TJ - Next.js’s security vulnerability

Bonus News:

• Redwood JS enters maintenance mode
• Browser Use Raises $17M

Fire Starters:

• CSS interpolate-size: allow-keywords

What Makes Us Happy this Week:

• Paige - Mythic Quest TV series
• Jack - Relearning guitar and the Katana Go headphone amp
• TJ - Open AI image generation and Studio Ghibli

Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.

• Front-end Fire website
• Blue Collar Coder on YouTube
• Blue Collar Coder on Discord
• Reach out via email
• Tweet at us on X @front_end_fire
• Follow us on Bluesky @front-end-fire.com
• Subscribe to our YouTube channel @Front-EndFirePodcast