Post #2931596

@mudri@mathstodon.xyz it’s a similar problem with HTML, where templating libraries take HTML string fragments that shouldn’t contain user values; in Go there is `safehtml`: https://github.com/google/safehtml Where they use the "un-exported string type" to ensure the HTML fragments are there during compile time: https://github.com/craigfrancis/php-is-literal-rfc/blob/main/others/go/index.go