Not a month goes by without any random web framework receiving a security update regarding XSS and the like. You're better protected using web frameworks than

Not a month goes by without any random web framework receiving a security update regarding XSS and the like. You're better protected using web frameworks than trying to reinvent things by yourself, surely, but also let's not believe in miracles.