10 lines
389 B
Plaintext
10 lines
389 B
Plaintext
"dangerouslySetInnerHTML" is React’s replacement for using "innerHTML" in the browser DOM.
|
||
|
||
Even if its goal is to not expose your users to a cross-site scripting (XSS) attack, there is a great chance you wrongly use it and finally create an XSS vulnerability. Consider refactoring your code to not use "dangerouslySetInnerHTML".
|
||
|
||
|
||
== See
|
||
|
||
* \https://reactjs.org/docs/dom-elements.html
|
||
|