[dsrw]

I agree, but certain operations need to safely accept untrusted input if I'm going to handle input at all. Running a regex on user input doesn't mean I trust the input. It means I trust my regex engine. I should be able to trust my logger the same way.

[dylan604]

if your logger is running an eval, you shouldn't trust it one bit