video1.0<iframe src="https://www.loom.com/embed/7ed1536ead724322bed8de413f9a82b9" frameborder="0" width="1920" height="1440" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>14401920Loomhttps://www.loom.com14401920https://cdn.loom.com/os/loom-media-content/loom/6603c84b-a791-4422-9e78-3bff122b09a7/14872b57-f973-4e3b-a73e-bf3adcfa715e/sessions-thumbnails-7ed1536ead724322bed8de413f9a82b9-c398d1b5dbf1669b.gif/binary?authToken=eyJraWQiOiJtaWNyb3MtZ3JvdXAvdGRwLW9zLWFyY2hldHlwZS9icjZlYTZwZmhrdm5tcWJsIiwiYWxnIjoiUlMyNTYifQ.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.dHYuZSzJ9Mi3VZNES9Zyfuo0VLfaLX88gjhe7oGA3o6Z_cf95LBmoqxVHdtmLaG4YtG0QEetdceCRapugzOLzy-_d-DQOfoW0hYJaRQLilSpv320cIoiEWVq6fW4kgx5QBjcm5MzjPiRMgFN-gs4GFTq0utczHJMr-eVtoS9dRb1XUb59tufmkeHDQ1oYpHEoKKQkZCWs7TM6llAvYceFsWur1ZhYDvXE-3D4q5TtvPo2b5_2z9PHYfJL2CEfHis-MIsdYKVWc7amQ11JS5pdiO8KCm8eYhTN5Wh8Bzh-jxKtlnN1N26qECqrAAl3fFeUJcQqFxqU8PjWGTxGay1CA&Expires=1793425013&Signature=DT11B9Q-qOezGu5P%7E6tuAliEc9ELUw9g1RGeW2YFsBbFO1bXxR64XK2rR9iVocZ8L4FYGAmBnCbBfX2jC56-L8DgT-WToxbzNKAw9vFgwxCfRrpNCJuJ-ODRm2P7asetltgTOxnppUE5Av8oHR2tMSZCm0aEuE7E0ytqCmxwA9y9aBu-yI4m1JAeSw5ilX%7Eck1JqDrXXJ9U57850vAGW64ugsQx0W9xZ2U08XyO6p7fF3JxNX30hGfyISsztEugxz6MYV3iPv%7E1KJITYecAEdM5jx4S%7EvAEyhepurYtQ7fmENgXVUklYxx%7E-A3m9Hh-YsXKZWKcXvdsqvqkl6gHVJg__&Key-Pair-Id=KQOSYIR44AIC082.197333This Loom demonstrates fixing a security bug involving unsanitized, inert, stable, and chip components and an area components repository. The author replicates the issue locally in the component under chip default, where changing the value to HTML currently renders HTML, and using an invalid image source (X) triggers an onError alert. After the fix, the shape default behavior is updated so changing the value renders a sanitized React node, and using an image tag no longer fires the alert or executes. The author concludes by thanking the audience.