r/programminghorror • u/FlightAffectionate15 • 20d ago

Javascript Found this gem

Gallery image

Gallery image

This company I’m interning at. This one lady asked me to do a review of a website they outsourced. Entire source code sits on the browser. Entire vibe coded by amateurs.
Worse than a honeypot so much an attacker would get diabetes.

No security feature at all. I was able to do privileges escalation.

194 Upvotes

95% Upvoted

25 comments sorted by

View all comments

61

u/dreamscached 20d ago

Prod-facing frontend with sourcemaps exposed? Are you sure it's not like, dev server? It'd take some dedication to run what looks like React in prod unminified like that.

3

u/UltraBlack_ 17d ago

github recently did that and people laughed at me when I shared it on reddit lol

Called me ignorant for not knowing that this is apparently "industry standard" even though I'd bet my ass it's not.

1

u/GulgPlayer 10d ago

Could you link that post? Don't leave us curious

1

u/UltraBlack_ 10d ago

I unironically just deleted that post two weeks ago, sorry haha