Re: [htmltmpl] option to turn ESCAPE=HTML on by default

[Sam T. <sa...@tr...>]

On Fri, 14 Oct 2005, Mark Stosberg wrote:

> I'm curious about what other people think about an option to
> turn ESCAPE=HTML on default, to protect against cross script scripting
> practices by default. 

Sure, sounds reasonable to me.

-sam