3 ms·
Though that's like adding `<div>{escapeHtml(value)}</div>` everywhere you ever display a value in html to avoid xss. If you have to opt in to safe usage at eve
by hombre_fatal 1y ago
Though that's like adding `<div>{escapeHtml(value)}</div>` everywhere you ever display a value in html to avoid xss.
If you have to opt in to safe usage at every turn, then it's an unsafe way of doing things.
- stonogo 1y agoI don't disagree but "it's not possible for xxx to be used securely" is a long way from "it's cumbersome and tedious to use xxx securely"
- JasonSage 1y agoBut "it's not possible for xxx to be used securely" is a better premise if it deflects people who can't do it correctly.
- stonogo 1y agoLying to people because you think you're smarter than them is bad policy.
- rendaw 1y agoIf using it securely requires you to never ever forget, even once, I'd agree with GP.