title: Pyramid Chameleon template security for HTML and Javascript
body: <p>Do Chameleon templates escape/strip XSS and HTML tags for variables? Would the following be safe?</p>
  
  <pre><code>&lt;script type="text/javascript"&gt;
  
      var initialComments = ${comments};
      for (var i = 0; i &lt; initialComments.length; i++) {
          initialComments[i].userId = initialComments[i].user_id;
      }
      var post = ${post}
      // ...
  
  &lt;/script&gt;
  </code></pre>