~/talk

How React Applications Get Hacked in the Real-World

watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/how-react-applications-get-hacked-in-the-real-world
Talkat React Summit 2022 · 2022-06-17..06-21· [react, security]

speaker

name:Liran Tal
website:https://www.nodejs-security.com

resources

video:https://portal.gitnation.org/contents/how-react-applications-get-hacked-in-the-real-world
slides:none on file

summary

Demonstrates real-world XSS attacks against a live React application by showing how user-supplied links and JSON can be abused (e.g., malicious Twitter-style hrefs and JSON pretty-printing) because React does not sanitize or encode user input automatically. Covers concrete exploit techniques (adding crafted links, control-corrector/uppercase-lowercase tricks) and recommends sanitization, context-aware encoding, and secure handling of user data, including caution when using packages like react-json-pretty.

AI-written summary · about

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.