Re: Mason2: no default HTML escaping
Stephen Clouse <[email protected]>
| Newsgroups | gmane.comp.web.mason.user |
|---|---|
| Message-ID | <CAH0yPs19sDjctQXpqPyKNZJNTqMXstihvQ=sVgk2D8Bi+7GeLQ@mail.gmail.com> |
On Wed, May 9, 2012 at 3:15 PM, Jonathan Swartz <[email protected]> wrote: > > As you noted, escaping by default would be fine and largely a > non-argument if Mason were explicitly a Web template language, but it's not. > > I'm confused Stephen, because this statement seems to contradict your > other statement that "escaping by default never works right, because too > many templates contain a mix of html, javascript, css, etc." and that this > is "action at a distance" (paraphrasing). > *Personally*, I wouldn't want it for that exact reason, but I'm not Mason/Poet's primary author :) > If a thoughtful framework like django does this by default, then I'd say > it's a pretty good bet Poet ought to as well. > This justification I can get behind, whether I agree with the result or not. -- Stephen Clouse <[email protected]> ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Mason-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mason-users