the last one (script injection) isn't limited to python but any language that make use of template engine. escaping variables should be the default behavior. N

the last one (script injection) isn't limited to python but any language that make use of template engine. escaping variables should be the default behavior. Now I like python, it has many useful libraries, in fact it is one of the language that has the most libraries for any purpose. I wish, even as a dynamically typed language, it was stricter sometimes though.