38. Security in React applications

Prevent cross-site scripting, unsafe HTML injection, exposed secrets, insecure token storage, dependency attacks, and authorization mistakes. Treat client-side checks as user experience features rather than security boundaries.