React executes malicious code with malformed HTML–no authentication needed

Discussion (369 points, 8 hours ago, 112 comments) https://news.ycombinator.com/item?id=46136026

in the server