react-no-danger

Note: this rule is included in the following rule sets: react, fresh.

Enable the full set in ende.json:

{
  "lint": {
    "rules": {
      "tags": ["react"] // ...or "fresh"
    }
  }
}

Enable the full set using the Ende CLI:

ende lint --rules-tags=react
# or ...
ende lint --rules-tags=fresh

This rule can be explicitly included in or excluded from the rules present in the current tag by adding it to the include or exclude array in ende.json:

{
  "lint": {
    "rules": {
      "include": ["react-no-danger"],
      "exclude": ["react-no-danger"]
    }
  }
}

Prevent the use of dangerouslySetInnerHTML which can lead to XSS vulnerabilities if used incorrectly.

Invalid:

const hello = <div dangerouslySetInnerHTML={{ __html: "Hello World!" }}/>;

Valid:

const hello = <div>Hello World!</div>;