News for hackers. Stuff that matters.
Re:Maud: Compile-time HTML templates for Rust by detaro on Tuesday September 22, 2020 @05:59AM (#24552725)
seems like the FAQ is outdated regarding the authors view on that: https://github.com/lambda-fairy/maud/issues/181
Re:Maud: Compile-time HTML templates for Rust by lfairy on Wednesday September 23, 2020 @01:40AM (#24563366)
Author here. Yeah, that FAQ was written a few years ago and my opinions have changed since then.

I'd also like to emphasize that no Rust template engine – that I'm aware of – does context-aware escaping. At least Maud has it on the roadmap.

Re:Maud: Compile-time HTML templates for Rust by lucideer on Tuesday September 22, 2020 @07:08AM (#24553114)
I hate to come across as elitist or something—noone's perfect, and I appreciate people building software libraries & releasing them, regardless of their experience as a programmer.

But if someone's publishing a HTML templating system, and they don't have enough knowledge about HTML to understand the need for contextual escaping, I would have grave concerns about the Dunning-Kruger effect & the quality of any software that engineer writes.

Re:Maud: Compile-time HTML templates for Rust by vitno on Tuesday September 22, 2020 @09:17AM (#24554047)
Dunning-Kruger effect seems like a weird accusation to throw here. The whole basis of it is "a false sense of superiority", but the author is clearly willing to engage on this issue.

I think a better way of terming this would be that you have concern the the author might not have enough domain expertise, which is very different than being incompetent.

This gives me pause that Maud isn't right for a production system at this time, but is that so surprising for a 0.11 library?

Re:Maud: Compile-time HTML templates for Rust by lucideer on Tuesday September 22, 2020 @09:44AM (#24554301)
I suppose one does gain good experience and knowledge if one is receptive to feedback during the developing & maturing of a software project, so that is positive.

I guess what I was more getting at was the thought process that goes "I'm going to develop and release a library in X domain", when ones knowledge of said domain is low. And then launching said library before one has really gained a lot of knowledge of that domain.

Re:Maud: Compile-time HTML templates for Rust by lfairy on Wednesday September 23, 2020 @02:33AM (#24563670)
I might be biased, as I'm the engineer that you're talking about, but that characterization feels unfair. Context-aware escaping is by no means common in the open source world—just look at Jinja or Handlebars. So unless you're knee-deep in an ecosystem that embraces it, it's easy to brush it off as unimportant.