My employeer and some co-worker come in for some abuse but this seems very right to me: http://lukeplant.me.uk/blog/posts/why-escape-on-input-is-a-bad-idea/ …
@peterseibel agreed. IMO the correct solution is to use an HTML generation API rather than templates; this makes escape-on-output easy.
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.