Turn on disableJavaScriptURLs for experimental (#28462)
This is on everywhere, ready to turn on in the next major.
Ricky committed
Feb 27, 2024 at 16:33 UTC
dee1aac77f71e887c44bb79ecfe9c7a34ab3e74c
4 files changed
+3
-5
packages/react-dom/src/__tests__/ReactDOMServerIntegrationUntrustedURL-test.js
-2
@@ -195,8 +195,6 @@ describe('ReactDOMServerIntegration - Untrusted URLs - disableJavaScriptURLs', (
195
196
function initModules() {
197
jest.resetModules();
198
- const ReactFeatureFlags = require('shared/ReactFeatureFlags');
199
- ReactFeatureFlags.disableJavaScriptURLs = true;
198
199
React = require('react');
200
ReactDOMClient = require('react-dom/client');
packages/shared/ReactFeatureFlags.js
+1
-1
@@ -145,7 +145,7 @@ export const disableLegacyContext = false;
145
146
// Not ready to break experimental yet.
147
// Disable javascript: URL strings in href for XSS protection.
148
-export const disableJavaScriptURLs = false;
148
+export const disableJavaScriptURLs = __NEXT_MAJOR__;
149
150
// Not ready to break experimental yet.
151
// Modern <StrictMode /> behaviour aligns more with what components
packages/shared/forks/ReactFeatureFlags.test-renderer.js
+1
-1
@@ -28,7 +28,7 @@ export const enableFormActions = true; // Doesn't affect Test Renderer
28
export const enableBinaryFlight = true;
29
export const enableTaint = true;
30
export const enablePostpone = false;
31
-export const disableJavaScriptURLs = false;
31
+export const disableJavaScriptURLs = true;
32
export const disableCommentsAsDOMContainers = true;
33
export const disableInputAttributeSyncing = false;
34
export const disableIEWorkarounds = true;
packages/shared/forks/ReactFeatureFlags.test-renderer.www.js
+1
-1
@@ -28,7 +28,7 @@ export const enableFormActions = true; // Doesn't affect Test Renderer
28
export const enableBinaryFlight = true;
29
export const enableTaint = true;
30
export const enablePostpone = false;
31
-export const disableJavaScriptURLs = false;
31
+export const disableJavaScriptURLs = true;
32
export const disableCommentsAsDOMContainers = true;
33
export const disableInputAttributeSyncing = false;
34
export const disableIEWorkarounds = true;