Comment by solyin

I had my Claude refuse to do anything interesting with the recent php vulnerability, yet it'll readily identify issues in the code of web apps it whips up for me, so I don't think that's entirely the case. Though that may be a case of me knowing what I'm doing, so I'm able to draw on my experience and ask specific questions (like why doesn't that bit lead to an XSS?) without realizing that someone newer to the field wouldn't know to ask. Yeah, idk.