"considers"? It just finds a match and goes with it, and that does cause issue. Both of the above have potential security implications. Filippo suggests prefe

"considers"? It just finds a match and goes with it, and that does cause issue. Both of the above have potential security implications. Filippo suggests preferring crypto/rand over math/rand as a softfix in this twitter conversation: https://twitter.com/filosottile/status/752210041709719552 https://twitter.com/filosottile/status/752210041709719552 I'd probably prefer html/template over text/template as it's better to have someone ask why their output was HTML escaped than to have someone render HTML in plain text without explicitly wanting to do so.