React Doesn’t Prevent XSS — Developers Do (opens in new tab)

React has a reputation for being secure against Cross-Site Scripting (XSS), and for good reason. By default, React escapes user-controlled…