A great read. Sylvie's writeup is good too: https://sylvie.fyi/posts/react2shell/