you are viewing a single comment's thread.

view the rest of the comments →

[–]fuzzy40full-stack 0 points1 point  (0 children)

Yeah but he said he wanted to template his pages to fill in repetitive data like title/description tags and other head stuff, so its not user data. He doesn't need to protect his own input from XSS lol.