note moritz <p>IMHO the proper solution isn't (or at least not only) rigorous testing, but escaping by default. I've asked about that in the past, [id://734705] (esp. the reference to [mod://Template::Stash::HTML::Entities ] and [id://680582] might be relevant.</p> <p>If none of those solutions work well, I'd consider it sufficient reason not to use TT2, and switch to a template system that supports default escaping.</p> <!-- Node text goes above. Div tags should contain sig only --> <div class="pmsig"><div class="pmsig-616540"> [|Perl 6 - the future is here, just unevenly distributed] </div></div> 1059961 1059961