btremI'm part way through spinning off a footnotes plugin for 11ty. Security question regarding nunjucks templating. If my footnotes filter returns html markup in a nunjucks template, it returns the html escaped. I can chain a `safe` filter, i.e., `{{ 1 | fn | safe}}`, but that's a lot of characters for a footnote.
btremI can make the filter return safe html, so I'd only need `{{ 1 | fn }}`. But are there security considerations I should be aware of? If I make the plugin available via npm or gh, I don't want to expose users. But I can't think of how it could be a problem.
shoesNsocks, kirui, Vanity3435 and rrix joined the channel