dillon1000/react

Commit

sanitize javascript: urls for <object> tags (#29808)

sanitize javascript: urls for <object> tags

React 19 added sanitization for `javascript:` URLs for `href` properties
on various tags. This PR also adds that sanitization for `<object>` tags
as well that Firefox otherwise executes.
Browse files
Jan Kassens authored f0e8164410049aabc680035e8fd45b657eb020ab Parent fb9a90f
Changed paths4 files
First-parent comparison
M packages/react-dom-bindings/src/client/ReactDOMComponent.js ModifiedM packages/react-dom-bindings/src/server/ReactFizzConfigDOM.js ModifiedA packages/react-dom/src/__tests__/ReactDOMServerIntegrationObject-test.js AddedM packages/react-dom/src/__tests__/ReactDOMServerIntegrationUntrustedURL-test.js Modified
Patch

Files changed

Rendering syntax-highlighted changes…