@tsturm@famichiki.jp it depends. Automatically escaping user input strings? Good! Automatically escaping sandboxes? Bad.