From 52d8d3b2ff7b0d50cc8f20a99e5707c11aeace0d Mon Sep 17 00:00:00 2001 From: Bradley Spaulding Date: Mon, 21 Sep 2015 22:09:06 -0700 Subject: [PATCH] Extracted "safe taint" in docs/homepage to align with best practice #4212 --- docs/_js/examples/markdown.js | 7 ++++--- docs/docs/tutorial.md | 8 ++++++-- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/docs/_js/examples/markdown.js b/docs/_js/examples/markdown.js index 52a6e5caf5..249f978bfc 100644 --- a/docs/_js/examples/markdown.js +++ b/docs/_js/examples/markdown.js @@ -6,6 +6,9 @@ var MarkdownEditor = React.createClass({ handleChange: function() { this.setState({value: React.findDOMNode(this.refs.textarea).value}); }, + rawMarkup: function() { + return { __html: marked(this.state.value, {sanitize: true}) }; + }, render: function() { return (
@@ -17,9 +20,7 @@ var MarkdownEditor = React.createClass({

Output

); diff --git a/docs/docs/tutorial.md b/docs/docs/tutorial.md index 621b514f5b..1d0d3e874b 100644 --- a/docs/docs/tutorial.md +++ b/docs/docs/tutorial.md @@ -257,14 +257,18 @@ That's React protecting you from an [XSS attack](https://en.wikipedia.org/wiki/C ```javascript{4,10} // tutorial7.js var Comment = React.createClass({ - render: function() { + rawMarkup: function() { var rawMarkup = marked(this.props.children.toString(), {sanitize: true}); + return { __html: rawMarkup }; + }, + + render: function() { return (

{this.props.author}

- +
); }