Not really. Lots of template engines escape and/or sanitize interpolated express... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tomjakubowski on May 27, 2023 \| parent \| context \| favorite \| on: That people produce HTML with string templates is ... Not really. Lots of template engines escape and/or sanitize interpolated expressions, according to the context, by default.

yencabulator on May 27, 2023 [–]

Well that goes far beyond what I think of as "string templates", now you're parsing the string into HTML.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact