3 ms·
<img src='x' onerror='alert(1)'> https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML#security_considerations https://developer.mozilla.org/en-US
by leonardopainter 5y ago
<img src='x' onerror='alert(1)'>
https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML#security_considerations https://developer.mozilla.org/en-US/docs/Web/API/Element/inn...
- TekMol 5y agoTrue. But the same issue with reacts way.
- leonardopainter 5y agoIn terms of the placeholders in JSX, no they are escaped.