·6 min read
The SSR RPC bridge, part 2: the security model, threat by threat
Deny-by-default is one layer. Here's every other threat the bridge is built to handle — prototype pollution, CSRF, and the line between what it secures and what your code still has to.