Question: how jsx prevents injection attacks?
Answer: JSX Prevents Injection Attacks By default, React DOM escapes any values embedded in JSX before rendering them. Thus it ensures that you can never inject anything that's not explicitly written in your application. Everything is converted to a string before being rendered.