Merge pull request #513 from edkimmel/unescape-state-script

fix: unistyles state was escaped leading to invalid syntax
jpudysz · Jan 22, 2025 · a30aa8e · a30aa8e
2 parents a9d2b44 + d4530d1
commit a30aa8e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/server/getServerUnistyles.tsx b/src/server/getServerUnistyles.tsx
@@ -15,6 +15,7 @@ export const getServerUnistyles = ({ includeRNWStyles = true }: ServerUnistylesS
     return <>
         {rnwStyle && <style id='rnw-style'>{rnwStyle}</style>}
         <style id='unistyles-web'>{css}</style>
-        <script id='unistyles-script'>{`window.__UNISTYLES_STATE__ = ${JSON.stringify(state)}`}</script>
+        {/* biome-ignore lint/security/noDangerouslySetInnerHtml: Needs the json quotes to be unescaped */}
+        <script id='unistyles-script' dangerouslySetInnerHTML={{ __html: `window.__UNISTYLES_STATE__ = ${JSON.stringify(state)}`}} />
     </>
 }