How dangerous is it to let users specify RazorEngine templates?
I have mail-merge like functionality, which takes a template, some business object, and produces html which is then made into PDF.
I have mail-merge like functionality, which takes a template, some business object, and produces html which is then made into PDF.