Search Results for "javascript injection"

...I used it in my other projects (e.g. ajv) as the smallest, fastest and most functional (all three!) templating engine ever made, that is particularly useful in all code generation scenarios where manipulating AST is overkill. doT allows arbitrary JavaScript code in templates, making it one of the most flexible and powerful templating engines. It means that doT security model assumes that you only use trusted templates and you don't use any user input as any part of the template, as otherwise it can lead to code injection.