search

AnyRoad / react-json-view-lite

Lightweight Json view component for React
MIT License
161 stars 17 forks source link

XSS Vulnerabilities Protection #10

Closed prathamesh-mutkure closed 1 year ago

prathamesh-mutkure commented 1 year ago

I want to use this library for rendering JSON data for a very big open-source project but they have concerns over security measures, specifically the XSS vulnerability protection.

Does this library provide out-of-the-box support or I'll have to manually do the thing?

AnyRoad commented 1 year ago

Hi,

This library does not use dangerouslySetInnerHTML (all data is rendered as String) or sets any HTML attributes like a.href so it should be XSS protected.