React-redux window.initialReduxState does not escape angled brackets #110

New Issue

fergalmoran · 2025-08-09T17:15:02Z

fergalmoran commented

2025-08-09 17:15:02 +00:00

Originally created by @McAroon on 3/29/2018

When server prerendering is enabled, writing something like </script><script>alert(1)</script> into a redux state variable will result in script execution and page breakage.
Is there a way to fix this or if not what would be the best workaround?

*Originally created by @McAroon on 3/29/2018* When server prerendering is enabled, writing something like `</script><script>alert(1)</script>` into a redux state variable will result in script execution and page breakage. Is there a way to fix this or if not what would be the best workaround?

fergalmoran closed this issue

2025-08-09 17:15:02 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/JavaScriptServices#110