in reply to Template toolkit XSS

Wouldn't it be easier to address data validation and use case handling in the pure Perl that calls it rather than in the template?

One world, one people

Replies are listed 'Best First'.
Re^2: Template toolkit XSS
by Anonymous Monk on Aug 05, 2015 at 09:07 UTC

    Wouldn't it be easier to address data validation and use case handling in the pure Perl that calls it rather than in the template?

    Two separate issues

    The model does its own validation for correctness

    The view (template) does its own "validation" ... to ensure correct display of stuff, html, json ... whatever

      TT can certainly do that, although I would personally find it conflicts with my code design objectives in regard to the downscalability of testable units.

      One world, one people

        What?