dillon1000/react

Commit

Sanitize the string tag passed to DOM components

Because we're using innerHTML to generate DOM Elements, we need to make
sure that the tag is sane and doesn't try to do injection.

This wouldn't be an issue if we used document.createElement instead.
Browse files
Changed paths2 files
First-parent comparison
M src/browser/ui/ReactDOMComponent.js ModifiedM src/browser/ui/__tests__/ReactDOMComponent-test.js Modified
Patch

Files changed

Rendering syntax-highlighted changes…