---
source: crates/biome_js_analyze/tests/spec_tests.rs
expression: createElement.js
---
# Input
```jsx
React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })

```

# Diagnostics
```
createElement.js:1:30 lint/security/noDangerouslySetInnerHtmlWithChildren â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”

  ! Avoid passing both children and the dangerouslySetInnerHTML prop.
  
  > 1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
      â”‚                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
    3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
  
  i This is the source of the children prop
  
  > 1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
      â”‚                                                                             ^^^^^^^^^^^^
    2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
    3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
  
  i Setting HTML content will inadvertently override any passed children in React
  

```

```
createElement.js:2:30 lint/security/noDangerouslySetInnerHtmlWithChildren â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”

  ! Avoid passing both children and the dangerouslySetInnerHTML prop.
  
    1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
  > 2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
      â”‚                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
    4 â”‚ 
  
  i This is the source of the children prop
  
    1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
  > 2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
      â”‚                                                                             ^^^^^^^^^^
    3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
    4 â”‚ 
  
  i Setting HTML content will inadvertently override any passed children in React
  

```

```
createElement.js:3:30 lint/security/noDangerouslySetInnerHtmlWithChildren â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”â”

  ! Avoid passing both children and the dangerouslySetInnerHTML prop.
  
    1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
    2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
  > 3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
      â”‚                              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    4 â”‚ 
  
  i This is the source of the children prop
  
    1 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, ['children'])
    2 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' } }, 'children')
  > 3 â”‚ React.createElement('div', { dangerouslySetInnerHTML: { __html: 'HTML' }, children: 'children' })
      â”‚                                                                           ^^^^^^^^^^^^^^^^^^^^
    4 â”‚ 
  
  i Setting HTML content will inadvertently override any passed children in React
  

```