|
|
|
|
|
by jacquesm
1076 days ago
|
|
Laravel has had their own share of XSS issues with their Blade templating engine. The whole problem is that you mix code and data, and that third party resource loading is 'on' by default in browsers, especially for scripts and things that can embed scripts. This is not something you can fix once and for all at the library level. |
|