Mirroring user-supplied input into our error messages introduces a risk of poisoning whatever our libraries output is written to with potentially malicious user-supplied data. We should discuss if we want to add an option to only print errors without user-supplied input.
Mirroring user-supplied input into our error messages introduces a risk of poisoning whatever our libraries output is written to with potentially malicious user-supplied data. We should discuss if we want to add an option to only print errors without user-supplied input.