liquid
liquid copied to clipboard
escape all outputted variables by default
Would it be possible to configure liquid to make escaping opt out instead of opt in with the escape filter?
We have had problems with escaping being missed when implementing. If it escapes everything by default its harder to miss and you make an active choice to not escape potentially risky outputs.
React for example escape all output by default
did you find any solution to this? would be great if the linked PR got merged