Securing Controlled Form Inputs Against Script Injection

import React, { useState } from 'react';
 
function SafeCommentForm() {
  const [comment, setComment] = useState('');
 
  const handleChange = (e) => {
    const sanitized = e.target.value.replace(/[<>]/g, '');
    setComment(sanitized);
  };
 
  return (
    <div>
      <input type="text" value={comment} onChange={handleChange} placeholder="Enter comment" />
      <p>Safe Preview: {comment}</p>
    </div>
  );
}
 
export default SafeCommentForm;