Safe JavaScript Templating on August 19, 2015 auto escaping filtering safe js templating secure-handlebars xss xss-filters +