“attacker that has file-write access on build or webserver can do malicious things” 🫣

I am once again asking people to stop sending us security reports of the form "Attacker who controls input .ts file content has control of output .js file"

Quoted post

— Ryan "UnionToTuple" Cavanaugh (August 27, 2026 at 6:59:31 PM UTC)