Code reviewHardcr-g401

Subject XssLevel Senior–Staff~22 minCommon in Security interviewsIndustries Software development

Question

Review this React TypeScript markdown renderer.

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewtsx

1import DOMPurify from 'dompurify';2 3function Note({ markdown }: { markdown: string }) {4  const html = mdToHtml(markdown);5  const clean = DOMPurify.sanitize(html, { ADD_ATTR: ['onclick'] });6  return <div dangerouslySetInnerHTML={{ __html: clean }} />;7}

Run or narrate your approach, then ask the coach.