Skip to content
Secure Markdown Rendering in React: Balancing Flexibility and Safety
hackerone.com | vulnerability | #web-security | #xss | #react | #frontend-security | #markdown | #dompurify | #sanitization
Summary
Rendering user-generated Markdown risks XSS when output becomes HTML. react-markdown escapes HTML by default; pair it with DOMPurify sanitization before dangerouslySetInnerHTML if HTML is required.
- Published
- Collected