Insights – SRC Innovations

React

One request, full server access: Inside the React2Shell vulnerability

10 March 2026

The recently disclosed React2Shell (CVE-2025-55182) vulnerability represents a critical security flaw affecting certain React-based applications that improperly handle user-controlled input in server-side execution contexts. This vulnerability can allow attackers to escalate from client-side manipulation to remote command execution (RCE) on backend systems. In this post, we’ll break down: What is React2Shell? The React2Shell vulnerability is […]

Master async React tests

5 November 2025

Modern React apps lean heavily on local state and async side effects (fetching data, debounced handlers, timers, transitions). If your tests don’t model those behaviours accurately, you’ll ship brittle UI and flaky tests. This post tackles three common pain points and shows reliable test patterns with React Testing Library (RTL) + Jest/Vitest. Common issues developers […]

Level up your React apps: TypeScript tricks for accessibility

11 September 2025

Accessibility means building websites that everyone can use, including people who rely on screen readers, keyboard navigation, or other assistive technology. In React, it’s easy to accidentally ship inaccessible code without realising it. This is where TypeScript helps. Beyond preventing runtime bugs, TypeScript can also catch accessibility mistakes at compile time: wrong ARIA attributes, mis-typed […]

The 6 React mistakes you need to stop making now

21 August 2025

React is one of the most popular front-end frameworks, widely adopted for large-scale enterprise applications and consumer-facing websites. It’s powerful and flexible, but its popularity means many inexperienced developers pick it up quickly without always following best practices. This post highlights common bad techniques and the corresponding good practices that help keep applications maintainable, testable, […]