Inspector
The same markup - carrying a <script> tag, event handler attributes, and javascript: URLs - rendered twice: once sanitized by default, once with disable-sanitization set. Same payload the React Inspector demo uses.
The same markup - carrying a <script> tag, event handler attributes, and javascript: URLs - rendered twice: once sanitized by default, once with disable-sanitization set. Same payload the React Inspector demo uses.