mrclay.org
String Subtypes for Safer Web Programming
Valid HTML markup involves several different contexts and escaping rules, yet many APIs give no precise indication of which context their string return values are escaped for, or how strings should…