Not the expected answer, especially at this forum ... but HTML::Template does not suffer from this symptom. It doesn't really have many features at all, however ... just loops, conditionals, includes, and variable interpolation.
A question: are you wanting users to be able to supply their own templates for the look and feel? If so, you might be able to allow them to supply their own CSS stylesheet instead. Go take a look at http://www.csszengarden.com to see what i mean. jeffa --- "Cahill, Earl" <[EMAIL PROTECTED]> wrote: > Howdy, > > I am working a blogging utility that needs to be templated, and have been > pondering allowing users to use their own templates. The user's templates > would exist in their own directory, but they won't be chrooted there. I > know I shouldn't turn on EVAL_PERL, or ABSOLUTE, and I should have RELATIVE > turned on. Hoping that users don't have access to change those settings > from a page being evaluated. > > Just wondering about the security implications, if there other things I > should do, and if there are sites out there that process pages provided by > untrusted users. > > Thanks, > Earl > > _______________________________________________ > templates mailing list > [EMAIL PROTECTED] > http://lists.template-toolkit.org/mailman/listinfo/templates __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html _______________________________________________ templates mailing list [EMAIL PROTECTED] http://lists.template-toolkit.org/mailman/listinfo/templates
