@prologic@twtxt.net Hmmm. Not so sure about that: https://lyse.isobeef.org/tmp/htmlresponsewriter.png Do I like it or not? I mean it’s cool to be able to write quick helpers directly in Go. Another benefit is that the HTML form field names are directly visible and thus can be quickly connected to the incoming request. But it’s still a bit awkward. An escape helper with a very short name would be a bit nicer to be used “inline”. But I actually would go the other way around and mark everything explicitly safe and apply auto-escaping to all unmarked strings. This way it cannot be forgotten. But this then gets a bit lengthy in the Go code I reckon.