Fighting against malicious template authors is a losing battle I don't want to fight. I simply won't hire or work with somebody I consider malicious, and don't

Fighting against malicious template authors is a losing battle I don't want to fight. I simply won't hire or work with somebody I consider malicious, and don't trust the general public to write templates for my system. Zope tried that with "safe python" and TAL/TALES/METAL, and it was an utter abortion.