Please?
I'm sorry, I'm not going to add this to ctemplate (of course, you're
welcome to hack it into your own version yourself). This is correctly
done, by the people who care, outside of ctemplate proper.
Hacking is not an option. :p
How do I verify (without modifying ctemplate), that every template uses
auto escaping?
Just analyze the template files using the tool of your choice. I don't
know windows, so I don't know what that tool would be, but there must be
something similar to grep (or maybe you could download a version of grep
that runs on windows).
That'd be hacking again. And bad software engineering.
The solution should be simple and cross-platform.