React executes malicious code with malformed HTML–no authentication needed(arstechnica.com)3 points by gbourne 211 days ago | 2 comments