Add XSS example of insecure URL in database
dschwarz91 opened this issue · comments
In React it's not secure to use untrusted input in the href
attribute of anchor elements (explanation, CodeSandbox, official docs showing deprecation)
Create an additional example showing a new blog_posts.url
field.
This could also be additionally connected with allowing users to create new blog_posts
records via: