Security type contracts. In the form just described, SCAETEs do not account for scenarios where template parameters are intended to be used without validation or escaping, such as aboutHtml in Figure 1c—the SCAETE unconditionally validates
and escapes all template parameters, and disallows directives to disable the auto-escaping mechanism.