next.js
eb0bd561 - docs: Don't suggest using taintUniqueValue API with phone number (#62600)

Commit
2 years ago
docs: Don't suggest using taintUniqueValue API with phone number (#62600) Linked react docs explicitly advise not to use low-entropy values such as phone numbers with the taintUniqueValue API. https://react.dev/reference/react/experimental_taintUniqueValue#caveats > Do not use taintUniqueValue to protect low-entropy values such as PIN codes or phone numbers. If any value in a request is controlled by an attacker, they could infer which value is tainted by enumerating all possible values of the secret. PS Sorry for the tiny change but this threw me off when I read it.
Author
Parents
Loading