Validation/defaults about use-url-state HOT 3 CLOSED

Hi @mrclay

The API for withUrlState forces you to provide initial values for your state, in the color change example you can see this on the last line. I think this covers what you are suggesting with expected names / defaults.

Im not sure what you mean by validators, can you expand on that a little bit?

from use-url-state.

An attacker can easily send a user to a page with arbitrary querystring, which gets injected right into props. It should be safe, but I wouldn't gamble on it being harmless in all apps. Hopefully no one's dumb enough to render something from props.urlState as raw markup! OK, at least markup script injection isn't an issue.

from use-url-state.

That's a good point, at the moment the onus is on the user to make sure that they are validating what comes in from the query param. I will have a think about if this is best handled in the docs or by adding additional features.

from use-url-state.