this post was submitted on 11 Feb 2026
8 points (100.0% liked)

Security

2009 readers
3 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
Vacant@programming.dev
8
Breaking Down CVE-2026-25049: How TypeScript Types Failed n8n's Security (hetmehta.com)
submitted 4 weeks ago by codeinabox@programming.dev to c/security@programming.dev
4 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.bestiver.se/post/919467

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] Kissaki@programming.dev 1 points 1 week ago

Seems like TypeScript could be generating JavaScript code that does these type checks on function entry - with a runtime cost of course.

Is there no such setting, general or conditional toggle on functions or types?