On Sun, Mar 10, 2013 at 12:01 PM, Rik Brown <rik@rikbrown.co.uk> wrote:I wouldn't want things like database password to be automatically
>> I think it could be useful if the config would be also accessible. Or is
>> there a reason this would not be a good idea?
available. Then a template bug could cause a huge security hole.
I think if you want to make config data available in templates, it's
be to do that yourself, explicitly and limit it only to keys you need.