Hi developers,

Is there a way to fix globally XSS problems?

We should introduce a default filter for all variables used in templates.

I have opened bug 13618 to collect ideas and/or solutions.

Feel free to contribute,
Jonathan