https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43182

--- Comment #7 from David Cook <[email protected]> ---
(In reply to Marcel de Rooy from comment #4)
> Shouldnt we look for TT replacements instead of extending the old style ?

It's a good question. 

Honestly, I think allowing non-system users the ability to provide TT code is a
security problem. TT is so powerful and flexible. We try to hobble it as much
as we can for end users, but it has a large surface, so it's a big target.

I think we'd be better off using a simpler template syntax like Mustache or
Handlebars:
https://metacpan.org/pod/Text::MustacheTemplate
https://metacpan.org/pod/Text::Handlebars

Much less potential for abuse.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to