Provide link component for js modules to improve usability and security

[jahia-ci]

Imported from Jira, on Thu Jan 30, 2025
Issue: BACKLOG-23504 in project: DX BACKLOG
Priority: Unspecified Type: Spike
Reporter: @romain-pm (Romain Gauthier)
Assignee: None found in Jira, making reporter the assignee in GitHub
Created: Wed Jan 8, 2025, last updated: Fri Jan 17, 2025
Status: Open
Parent Epic: BACKLOG-23543 - javascript modules - Beta [JIRA] (Open)

Links:

• relates to: QA-14452 - XSS vulnerability through links [JIRA] (Closed)

Goal of the spike is to evaluate if we should provide a link component as part of the javascript-modules-library

To take into account:

• Ability to sanitize links automatically without asking the developer to do so (but maybe it is already part of React?) - https://academy.jahia.com/tutorials-get-started/java-developers/rendering-contents-views#xss-vulnerabilities
• Better dev experience?
• Astro and next.js strategy
• Weird edge case and requirements (aria attributes )
• Maintenance costs