Hacker News new | past | comments | ask | show | jobs | submit login

This can be done with a special type representing "trusted" data. For example, Go has template.HTML representing data that's safe to render without escaping. Everything else gets escaped.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: