* No possibility of SQL injection * No possibility of XSS (generally, although perhaps unusual content modification via javascript could open up XSS avenues?)

* No possibility of SQL injection * No possibility of XSS (generally, although perhaps unusual content modification via javascript could open up XSS avenues?) * No possibility of obscure dynamic language runtime bugs