News for hackers. Stuff that matters.
Re:New JSX Transform by j-f1 on Tuesday September 22, 2020 @08:50PM (#24561768)
There were security vulnerabilities a while ago that resulted from people being able to upload React-element-shaped JSON objects in certain places strings were supposed to go. IIRC this allowed for XSS, so React added a special symbol (the $$typeof key) that would have to be imported somehow in order to add it to the plain objects.
Re:New JSX Transform by steadicat on Tuesday October 06, 2020 @01:22AM (#24694948)
Interesting. Why not make that special symbol a tiny NPM module with a single published version that any library wishing to support JSX can import?