Sebastian Markbåge

Symbol Tagging for dangerouslySetInnerHTML to Help Prevent XSS

3

If you're spreading props from a user provided source we have a XSS. E.g. ```js var data = JSON.parse(decodeURI(location.search.substr(1))); function Foo(props) { return {props.content}; } ReactDOM.render(, container); ``` That's already...

Disable enablePostpone flag in experimental

2

I don't think we're ready to land this yet since we're using it to run other experiments and our tests. I'm opening this PR to indicate intent to disable and...

Test cached form action with revalidate

2

Stacked on #71628.

[Flight] Include env in ReactAsyncInfo and ReactIOInfo

1

Stacked on #33395. This lets us keep track of which environment this was fetched and awaited. Currently the IO and await is in the same environment. It's just kept when...

[Flight] Track Owner on AsyncInfo and IOInfo

1

Stacked on #33394. This lets us create async stack traces to the owner that was in context when the I/O was started or awaited. This owner might not be the...

[Flight] Log "Server Requests" Track

1

Stacked on #33392. This adds another track to the Performance Track called `"Server Requests"`. This logs the flat list of I/O awaited on by Server Components. There will be other...

[Flight] Track the function name that was called for I/O entries

1

Stacked on #33390. The stack trace doesn't include the thing you called when calling into ignore listed content. We consider the ignore listed content conceptually the abstraction that you called...

[Flight] Encode ReactIOInfo as its own row type

1

Stacked on #33388. This encodes the I/O entries as their own row type (`"J"`). This makes it possible to parse them directly without first parsing the debug info for each...

[Flight] Track Awaits on I/O as Debug Info

1

This lets us track what data each Server Component depended on. This will be used by Performance Track and React DevTools. We use Node.js `async_hooks`. This has a number of...

Optimizing Compiler: Tagging ReactElements

7

We can make more optimized reconciliation by tagging ReactElements with the "hidden class" of their props. For example, this is guaranteed to always have three props: `className`, `width`, `children`. ```...