eins78’s Twitter Archive—№ 6,243

munin Not quite sure I understand the context correctly, but off the top of my head: custom error pages sometimes include part of the request, which potentially could end up unescaped.