Also sanitize nodeName.

Author: developit

src/index.js

@@ -162,6 +162,7 @@ export default function renderToString(vnode, context, opts, inner, isSvgMode) {
 	else if (pretty && ~s.indexOf('\n')) s += '\n';
 
 	s = `<${nodeName}${s}>`;
+	if (String(nodeName).match(/[\s\n\/='"\0<>]/)) throw s;
 
 	if (VOID_ELEMENTS.indexOf(nodeName)>-1) {
 		s = s.replace(/>$/, ' />');