3 ms·

Should still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/ You trust your server-sid

Should still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/ You trust your server-side sanitization that much?

sk00byd00 13y ago
Do you trust the client side at all?
- octatone2 13y ago
  I trust handlebars with all my user inputs.