Skip to content

Commit c040180

Browse files
authored
Update README.md
Update the readme to add the security note
1 parent 59db520 commit c040180

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

README.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,9 @@ for all the passed options. However, be aware that your code could break if we
5555
add an option with the same name as one of your data object's properties.
5656
Therefore, we do not recommend using this shortcut.
5757

58+
### Important
59+
You should never give end-users unfettered access to the EJS render method, If you do so you are using EJS in an inherently un-secure way.
60+
5861
### Options
5962

6063
- `cache` Compiled functions are cached, requires `filename`

0 commit comments

Comments
 (0)