From 7077c5ed9659fc05853bdeeb1516364003d3f7ec Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Paul=20O=E2=80=99Shannessy?= <paul@oshannessy.com>
Date: Tue, 22 Sep 2015 10:53:50 -0700
Subject: [PATCH] Merge pull request #4931 from bspaulding/safe-taint-docs

Extracted "safe taint" in docs/homepage to align with best practice
(cherry picked from commit 06568114f3a23c5509809633a4e5e4f3b90a531a)
---
 docs/_js/examples/markdown.js | 7 ++++---
 docs/docs/tutorial.md         | 8 ++++++--
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/docs/_js/examples/markdown.js b/docs/_js/examples/markdown.js
index 52a6e5caf5..249f978bfc 100644
--- a/docs/_js/examples/markdown.js
+++ b/docs/_js/examples/markdown.js
@@ -6,6 +6,9 @@ var MarkdownEditor = React.createClass({
   handleChange: function() {
     this.setState({value: React.findDOMNode(this.refs.textarea).value});
   },
+  rawMarkup: function() {
+    return { __html: marked(this.state.value, {sanitize: true}) };
+  },
   render: function() {
     return (
       <div className="MarkdownEditor">
@@ -17,9 +20,7 @@ var MarkdownEditor = React.createClass({
         <h3>Output</h3>
         <div
           className="content"
-          dangerouslySetInnerHTML={{
-            __html: marked(this.state.value, {sanitize: true})
-          }}
+          dangerouslySetInnerHTML={this.rawMarkup()}
         />
       </div>
     );
diff --git a/docs/docs/tutorial.md b/docs/docs/tutorial.md
index 621b514f5b..1d0d3e874b 100644
--- a/docs/docs/tutorial.md
+++ b/docs/docs/tutorial.md
@@ -257,14 +257,18 @@ That's React protecting you from an [XSS attack](https://en.wikipedia.org/wiki/C
 ```javascript{4,10}
 // tutorial7.js
 var Comment = React.createClass({
-  render: function() {
+  rawMarkup: function() {
     var rawMarkup = marked(this.props.children.toString(), {sanitize: true});
+    return { __html: rawMarkup };
+  },
+
+  render: function() {
     return (
       <div className="comment">
         <h2 className="commentAuthor">
           {this.props.author}
         </h2>
-        <span dangerouslySetInnerHTML={{"{{"}}__html: rawMarkup}} />
+        <span dangerouslySetInnerHTML={this.rawMarkup()} />
       </div>
     );
   }