This simple React app shows what methods of rendering possible user input are safe from XSS (cross-site scripting vulnerabilites) and what methods are dangerous
npm start
Write XSS to the user input and inspect where it is dangerous. Code is in App.js