3 ms·
> composing plain ol’ HTML, which are just strings That way lies XSS attacks, might be better to have a DOM of some kind in your language.
by pabs3 4y ago
> composing plain ol’ HTML, which are just strings
That way lies XSS attacks, might be better to have a DOM of some kind in your language.
- diceduckmonk 4y agoThe template library in Go’s standard library handles XSS. Being a JavaScript-based doesn't preclude you from XSS, either.
- pdimitar 4y agoNot a month goes by without any random web framework receiving a security update regarding XSS and the like. You're better protected using web frameworks than trying to reinvent things by yourself, surely, but also let's not believe in miracles.