search

LavaMoat / LavaDome

Secure DOM trees isolation and encapsulation leveraging ShadowDOM
https://lavamoat.github.io/LavaDome/packages/core/demo/
MIT License
21 stars 4 forks source link

Address React internals processing leakage #26

Closed weizman closed 7 months ago

weizman commented 7 months ago

continue of #23

Bottom line: React exposes everything that's passed into it, which compromises LD's secret. To address that, we must force the developer to wrap the text with a token only LD can exchange back with the secret before passing it to React