Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> post ES6 [...] has some really good parts, like injection-proof template literal semantics.

What is injection-proof template literal? Any link about that? Thanks :)



https://julialang.org/blog/2013/04/put-this-in-your-pipe/#do... for what is this abstractly and why that is needed.

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe... for specific implementation in JS. Compare with f-strings in Python, which are superficially similar, but can’t be used to, eg, construct SQL or HTML not prone to injection attacks.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: