Hi monks! Today I started studying Dancer with this tutorial and maybe I'm getting ahead but I wonder is there a way to apply default html filter to all variables?
So far I've only seen an example with explicit syntax like:
[% entries.$id.text | html %]
However, it seems to me that this approach may lead to the fact that developer may forget to apply the filter and xss will occurs.
Searching for this topic led me to node and to Template::AutoFilter but it was in early 2011.
Should i use this approach today or there are modern ways to achieve this?
And can I use this with dancer?