TIL: INLINE EVENT HANDLERS STILL FIRE WHEN PASSED TO REACT'S DANGEROUSLYSETINNERHTML

Summary from the TLDR Web Dev newsletter

React's `dangerouslySetInnerHTML` allows execution of inline event handlers despite blocking `script` tags, posing a security risk.