From a2ae42db90d626eda8f84f127068bd1f95fb5a6d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Markb=C3=A5ge?= Date: Mon, 26 Apr 2021 21:46:36 -0400 Subject: [PATCH] Escape style values (#21356) --- packages/react-dom/src/server/ReactDOMServerFormatConfig.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/react-dom/src/server/ReactDOMServerFormatConfig.js b/packages/react-dom/src/server/ReactDOMServerFormatConfig.js index bc9e21c249..72e984f128 100644 --- a/packages/react-dom/src/server/ReactDOMServerFormatConfig.js +++ b/packages/react-dom/src/server/ReactDOMServerFormatConfig.js @@ -321,7 +321,9 @@ function pushStyle( valueChunk = stringToChunk('' + styleValue); } } else { - valueChunk = stringToChunk(('' + styleValue).trim()); + valueChunk = stringToChunk( + escapeTextForBrowser(('' + styleValue).trim()), + ); } } if (isFirst) {