[dancer-users] Accessing config in the templates

David Golden xdg at xdg.me
Sun Mar 10 16:44:50 GMT 2013


On Sun, Mar 10, 2013 at 12:01 PM, Rik Brown <rik at rikbrown.co.uk> wrote:
>> I think it could be useful if the config would be also accessible. Or is
>> there a reason this would not be a good idea?

I wouldn't want things like database password to be automatically
available.  Then a template bug could cause a huge security hole.

I think if you want to make config data available in templates, it's
be to do that yourself, explicitly and limit it only to keys you need.

David

-- 
David Golden <xdg at xdg.me>
Take back your inbox! → http://www.bunchmail.com/
Twitter/IRC: @xdg


More information about the dancer-users mailing list