Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lint for dangerously set inner html #153

Open
hisuwh opened this issue Feb 10, 2020 · 0 comments
Open

Lint for dangerously set inner html #153

hisuwh opened this issue Feb 10, 2020 · 0 comments

Comments

@hisuwh
Copy link
Contributor

hisuwh commented Feb 10, 2020

Suggest we lint for usages of dangerouslySetInnerHtml

<p dangerouslySetInnerHTML={{ __html: myHtmlVar }} />

Usages of this should be minimal and could introduce an XSS attack vector so extra warnings around this seem sensible.

https://github.com/yannickcr/eslint-plugin-react/blob/master/docs/rules/no-danger.md

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant