Excited about Dream web framework

…and I forgot to mention the most important, {| ... |} provides no default protection against injection attacks, creating a lot of programmer fatigue as one manually escapes everything, which at least seems to translate into a major security risk.

Almost any template system improves on this by doing at least HTML content and attribute escaping by default.

3 Likes