Back to the Catalog
code-review
typescript
javascript
react
security
concurrency

Can You Catch the AI's Bug?

24 questions

Review plausible AI-generated TypeScript, React, browser, Node.js, and SQL code. Catch race conditions, security mistakes, invented APIs, and assumptions that look reasonable until the runtime disagrees.

Questions

  1. Not answered. What can make this search UI display results for the wrong query?
  2. Not answered. What happens to the other operations when chargeCard() rejects first?
  3. Not answered. Why is this existence check unsafe even though both calls are awaited?
  4. Not answered. Why can All saved print before any save finishes?
  5. Not answered. Why does this cleanup flag block a stale response without blocking the current one?
  6. Not answered. Which changes can prevent a lost update in this balance workflow?
  7. Not answered. What is the safest direct fix when the value should be displayed only as text?
  8. Not answered. Which security checks are missing from this cross-window token handoff?
  9. Not answered. What security property is still missing after this CORS configuration?
  10. Not answered. Why can SameSite=Lax fail to protect this transfer endpoint?
  11. Not answered. Why does this parameterized query not safely select from the requested table?
  12. Not answered. What is wrong with this password-reset token generator?
  13. Not answered. Which correction uses the standard Fetch API to parse this response body?
  14. Not answered. Where does the standard throwIfAborted() method live?
  15. Not answered. Which modern JavaScript call correctly groups the orders by status?
  16. Not answered. Which built-in replaces this invented deferred-Promise API in modern JavaScript?
  17. Not answered. Which standard call combines these Sets without mutating permissions?
  18. Not answered. Which implementation correctly replaces the invented localStorage.getJSON() call?
  19. Not answered. What does this function do when the server returns a normal HTTP 404 response?
  20. Not answered. What is logged after this default sort?
  21. Not answered. What happens when this payload is serialized without a replacer?
  22. Not answered. Does the optional chain prevent an exception here?
  23. Not answered. Starting from zero, what count appears after one click?
  24. Not answered. What privacy guarantee does this TypeScript private field provide at runtime?