This week, I've been trying to hack around picking up function "from the ground", meaning global variables attached to `window`. Trying to discover whether I'm doing evil things or not, I decided to look into what React does with the `window` object.



_This post is not yet written, dumping in a bunch of links for now._


## code

- [`installHook(window)`](https://github.com/facebook/react/blob/0545f366d4d6b5959f4bb172e810c745f74b9513/packages/react-devtools-shared/src/hook.js) very interesting read, subpub
- react has a [by version loader from query string](https://github.com/facebook/react/blob/master/fixtures/dom/src/react-loader.js)
- [polyfills](https://github.com/facebook/react/blob/f6fb03edffcc5918ad2f37ed45bdc7c0c3b3d199/fixtures/dom/src/polyfills.js)
- [react interactions for pointer events](https://github.com/facebook/react/tree/cef47cbc01b3c41ef4bfe3cdf7abd09c34e4a9c2/packages/react-interactions)
- [react interactions for navigator](https://github.com/facebook/react/blob/4fb5bf61dd52473330fb5b3fdf0ffc091054a28c/packages/react-interactions/events/src/dom/Focus.js)
- [`window.clipboardData`](https://github.com/facebook/react/blob/b1a03dfdc8e42d075422556553ffe59868150e95/packages/react-dom/src/events/SyntheticClipboardEvent.js)
- [hackernews grab stories from window](https://github.com/facebook/react/blob/baff5cc2f69d30589a5dc65b089e47765437294b/scripts/bench/benchmarks/hacker-news/generate.js)

## notes

- most window accesses are to grab `React` and `ReactDOM` from `window`
- a lot of `window.location.search`
- a lot of the search results come from "fixtures", what are those?

## kiv

- [trusted types](https://github.com/facebook/react/blob/fdba0e5ce75f1cf1f82f2937f351bbfdcaadbcc5/packages/react-dom/src/client/__tests__/trustedTypes-test.internal.js)
- [fixtures art](https://github.com/facebook/react/tree/1da310809eb398d83fdc285c2b435e315a1c9019/fixtures/art)

Are React and Window Friends

code

notes

kiv