@slightlylate So what is your proposal? Escape any template literals like HTML? @mvsamuel @BrendanEich @ErikArvidsson @bradneuberg @wycats
-
-
@wycats: of course. And they should use templates for html. But sqli & xss persist 20 years on. /cc@RReverser@mvsamuel@BrendanEich -
@slightlylate@RReverser@mvsamuel@BrendanEich Disagree in the strongest terms about the economics & don't appreciate the grandstanding. -
@wycats: ok. Will go back to vacation. But think on the non-ember users for a moment. /cc@RReverser@mvsamuel@BrendanEich -
@slightlylate@RReverser@mvsamuel@BrendanEich the ones that don't use template libraries aren't going to be dissuaded by raw`` -
@slightlylate@RReverser@mvsamuel@BrendanEich and yes, would love to stop having this Twitter discussion :)
End of conversation
New conversation -
-
-
@wycats : "do it right and you don't need defense in depth" ignores reality /cc@RReverser@mvsamuel@BrendanEichThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.