dillon1000/react
Commit
Browse files Sanitize the string tag passed to DOM components
Because we're using innerHTML to generate DOM Elements, we need to make sure that the tag is sane and doesn't try to do injection. This wouldn't be an issue if we used document.createElement instead.
Changed paths2 files
First-parent comparisonsrc/browser/ui/ReactDOMComponent.js ModifiedM src/browser/ui/__tests__/ReactDOMComponent-test.js ModifiedPatch
Files changed
Rendering syntax-highlighted changes…