Using #PSR-3 placeholders properly in PHP (and other awesome alliterations).
Using #PSR-3 placeholders properly in PHP (and other awesome alliterations).
@neintonine Suppose a logged variable contains a Javascript string, and then shows up in a log viewer gui.
Or that it does get saved to a db, for later viewing.
In both cases, it's easier to sanitize if the vars are kept separate from the message template.
User supplied data should always be treated as hostile until proven otherwise.
And that's before we get to the translation question.