cious user could get their own HTML into our
app, allowing them to do things like access sensitive customer data.</p>
<p>For example, imagine that we have a chat app  and use our <code>make-bold</code>
helper to welcome the new users into the channel:</p>
<pre class="language-handlebars line-numbers"><code class="handlebars language-handlebars">Welcome back! <span class="token handlebars language-handlebars"><span class="token delimiter punctuation">{{</span><span class="token variable">make-bold</span> <sp