React executes malicious code with malformed HTML–no authentication needed
arstechnica.comDiscussion (369 points, 8 hours ago, 112 comments) https://news.ycombinator.com/item?id=46136026
in the server
Discussion (369 points, 8 hours ago, 112 comments) https://news.ycombinator.com/item?id=46136026
in the server