|
|
|
|
|
by jbverschoor
418 days ago
|
|
And you'd end up with almost no improvement. If you pass a "t-string" to a framework, it can force escaping. What you suggest is to rely on escaping by the user (dev), who, if he was aware, would already escape. Unless you'd suggest that it would still return a template, but tagged with a language. |
|