Untaint and no autoescaping for List* scripts