React Security Risk