Testing Next.js App Router for Single-Request RSC Denial-of-Service

A code-level analysis of the React Server Components denial-of-service vector that lets a single crafted request exhaust Next.js App Router server resources, along with the defensive configurations and mitigations developers should apply.