4 ms·
Wow, they had to write their own code to do localization safely with regard to XSS. I'm surprised that's not already available off the shelf.
by bluesnowmonkey 14y ago
Wow, they had to write their own code to do localization safely with regard to XSS. I'm surprised that's not already available off the shelf.
- jamessocol 14y agoIt's the weird combination of gettext, HTML, and user-supplied data that causes problems. But yeah, kind of surprising there isn't already something. That's why we moved the |fe filter up to jingo, as high and shared as we could.