i still dont see the added security issue. you define your template inside {% verbatim %} and if you want to preseed your data, you put that into the new {{ va

i still dont see the added security issue. you define your template inside {% verbatim %} and if you want to preseed your data, you put that into the new {{ variable|json_script }}... or do you mean that the developer uses a js framework for the main data and keeps using django templates for other, user generated parts (i.e. comments)? that would be a disaster, i agree btw, the last letter is an 'i' :)