3 ms·
Yes, lets needlessly make something harder and less secure in 99% of the cases because people want to be treated like a "grownup". How many times have you writ
by sbov 16y ago
Yes, lets needlessly make something harder and less secure in 99% of the cases because people want to be treated like a "grownup".
How many times have you written code that actually required raw, dynamic, unescaped html output in a template engine? I think I have... 2 times? And for 2 times I still had to escape the output 50% of the time - when displaying it in a form for the user to edit.