All articles
React
(2 articles)shadcnReactXSS
April 25, 2026 · VibeWShield Team
shadcn/ui Components: Where User-Controlled HTML Sneaks In
shadcn/ui is copy-paste components, which means you own them — and any sanitization they miss. Here are the three props that vibe-coded apps pass user content to and regret.
Read article
ReactRSCNext.js
April 21, 2026 · VibeWShield Team
React Server Components (RSC): The Hidden Data Leak Risk
Passing data blindly from Next.js Server Components to Client Components is causing severe API data leaks. Learn how to sanitize props.
Read article