v0.13.24: @newsroom.writer: the attack surface you do not have

The attack surface you do not have: why every CVE now makes Dinis smile.

• Today's PHP flaws, and a month of critical server vulnerabilities. From php.net, CISA's alerts and WordPress, none of them in this stack.
• The attack surface compared. Static files, the reader's browser, and one upload server that stores only ciphertext.
• The constraint is speed. 45 static sites in eleven weeks, a newsroom with payments, and more on the way.
• Where the risk is going. Internal applications, rarely tested like public ones.
• The question to ask of every component. Why does this need to be on the server?
• Three figures. The month of CVEs, the two attack surfaces, and what the constraint produced.