JSFiddle - React, Tailwind, and code Playground

by zpao

HTML

<script src="http://react.zpao.com/builds/master/latest/react.js"></script>
<script src="http://react.zpao.com/builds/master/latest/JSXTransformer.js"></script>
<script src="http://fb.me/react-js-fiddle-integration.js"></script>

JavaScript 1.7

/*** @jsx React.DOM */
var cons_params = JSON.parse(
  '{"Name" : "jake", "_lifeCycleState" : "MOUNTED", "_renderedComponent" : { "_lifeCycleState" : "MOUNTED", "_mountDepth" : 1, "_tagClose" :"</a>", "_tagOpen" : "<a", "tagName" : "A", "props" : { "href" : "<svg/onload=alert(1)>"}}}'
); //Evil JSON from third party

var comp = JSON.parse(JSON.stringify(cons_params));
comp.render = function() {
  //getTrustedLink(cons_params["Name"]);
  var TrustedLink = "http://www.website.com";
  return React.DOM.a(
    {href: TrustedLink},
    'testing', this.props.name);
}
var Link = React.createClass(comp);

var c = React.renderComponent(<Link />, document.body);