React executes malicious code with malformed HTML–no authentication needed

(arstechnica.com) by gbourne | Dec 4, 2025 | 2 comments on HN