React v0.5.2, 0.4.2
Merge pull request #2338 from zpao/react-security

[author] React v0.5.2, 0.4.2