3 ms·
Another day, another string-based template engine that will lead to invalid output and injection attacks. You don't need a new language specifically for templa
by davexunit 10y ago
Another day, another string-based template engine that will lead to invalid output and injection attacks. You don't need a new language specifically for templates, you need to use a real programming language with real data structures that represent the HTML/XML nodes.
http://www.more-magic.net/posts/structurally-fixing-injection-bugs.html http://www.more-magic.net/posts/structurally-fixing-injectio...