JSFiddle - React, Tailwind, and code Playground

HTML

<div id="app"></div>

React

class VulnerableApp extends React.Component {
  constructor(props) {
    super(props)
    this.state = {
    	usersHomepage: "javascript:alert('xss')"
    }
  }
  
  render() {
    return (
      <div>
        <p>User's homepage: <a href={this.state.usersHomepage}>User's homepage</a></p>
      </div>
    )
  }
}

ReactDOM.render(<VulnerableApp />, document.querySelector("#app"))