<FromGitter>
<Uzay-G> I noticed when using ECR with amber, nothing gets escaped, so for example if my username is `<h1>User</h1>` the html actually gets rendered
<FromGitter>
<Uzay-G> is there anything to prevent this?
<FromGitter>
<Uzay-G> Rails/ERB escapes by default
<FromGitter>
<Blacksmoke16> @ikaru5 are you using the old `Logger` module at all? Or a shard you have required?
<FromGitter>
<ikaru5> @Blacksmoke16 Yeah, for Granite: ⏎ Granite.settings.logger = Amber.settings.logger.dup
<FromGitter>
<Blacksmoke16> granite will have a release coming out soon to fix it
<FromGitter>
<Uzay-G> @Blacksmoke16 do you have any tips for the problem I mentioned above?
<FromGitter>
<Blacksmoke16> in the mean time could maybe set it to master, or the latest commit in master
<FromGitter>
<Uzay-G> it's pretty essential for web security
<FromGitter>
<Blacksmoke16> no sorry, i dont really much about server rendering stuff
<FromGitter>
<ikaru5> ah, okay :) Thank you!
<FromGitter>
<ikaru5> Do I still need this setting in my database.cr than? Or should I change it to something new?
<FromGitter>
<Blacksmoke16> uh no idea
<FromGitter>
<Blacksmoke16> prob dont need it anymore considering `Granite.settings.logger` isnt a thing anymore
<FromGitter>
<ikaru5> @Blacksmoke16 I have updated all shards to master... even micrate :D Removed also quartz_mailer, it had some Logger calls. But still getting some of this warnings... can i just disable them somehow?
<FromGitter>
<drujensen> you can try adding `--exclude-warnings` to the `.amber.yml` compile command for crystal.