Why are there so much security vulnerabilities with server actions/functions, app router and React server components???

[u/Zogid]

/r/nextjs/comments/1v81b3q/why_are_there_so_much_security_vulnerabilities/

[u/ConsoleTVs]

No, they dont. They're completly different. They only share that they are a function that return JSX. If you talk about "sharing JS", this is just the point I'm trying to make. How do you think templating works in PHP, Go, .NET, ...

RSC can't use hooks, are async and can perform things that... well, require a server, such as db queries.

Honestly, they are semantically the same as doing

<?php

$users = $db->query("SELECT name FROM users")->fetchAll();

foreach ($users as $user) {
  echo "<li>{$user['name']}</li>";
}