> In a sane way: Once the potential gets realized, the code gets adjusted.
>
> Or do you guard against XSS when your application isn't supposed to be
Absolutely, I'm all with you on that one.
BUT:
The chance that others than yourself will be interacting with your code
is fairly big if you do anything else than hobby coding for your self.
Thus, preventing others from messing up is good practice in pretty much
every case.
--
Posted via
http://www.ruby-forum.com/.