3 ms·

Only for you, it gets filtered before going over the wire. Have fun :)

• octatone2 13y ago
  Should still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/ You trust your server-side sanitization that much?
  • sk00byd00 13y ago
    Do you trust the client side at all?
    • octatone2 13y ago
      I trust handlebars with all my user inputs.