Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Another way to solve the escaping problem is by some kind of interpolation mechanism that takes care of escaping on its own: like JSX or template literals in JavaScript (although you have to remember to tag the latter), or prepared statements in SQL. Why fix a coding convention when you can fix the language?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: