Merged efge-death-to-dtml-var-branch into HEAD:
Removed most <dtml-var> to replace them with &dtml-foo;. This corrects a number of potential XSS holes, and simplifies auditability of the remaining legitimate <dtml-var>.
Showing
Please register or sign in to comment