mirror of
https://github.com/facebook/react.git
synced 2025-11-01 09:12:30 +00:00
rickhanlonii
83f2467a23
## Overview
This has landed, so we can remove the flag
## Changelog
This change blocks using javascript URLs such as:
```html
<a href="javascript:notfine">p0wned</a>
```
We previously announced dropping support for this via a warning:
> A future version of React will block javascript: URLs as a security
precaution. Use event handlers instead if you can. If you need to
generate unsafe HTML try using dangerouslySetInnerHTML instead.
DiffTrain build for [9f8daa6cb5](https://github.com/facebook/react/commit/9f8daa6cb5aae476cf54611874ea7522243c6ba6)