const handleClick = () => { console.log({ "<script>console.log(1)</script>": ""onerror=console.log(5)"", }); }; return <button onClick={handleClick}>Click me</button>;