Translations:Security checklist for developers/26/en

opcode caches (like APC) can't cache code mixed into strings.