Security

Open shama opened this issue 10 years ago • 2 comments

May 08 '15 16:05 shama

I'm assuming this has to do with escaping input values? I had some relevant discussions about it in https://github.com/segmentio/deku/issues/55 a while ago.

May 12 '15 00:05 yoshuawuyts

Nice thanks for the issue ref.

I think input security should be handled by a server side API. But I think any values going out to the DOM or CSS should escaped automatically by default. But I'm not sure the best way to do that yet.

May 12 '15 02:05 shama