hugo/docs/content/en/functions/safeHTMLAttr.md
2023-07-29 11:17:28 +02:00

1.2 KiB

title description categories menu keywords signature relatedfuncs
safeHTMLAttr Declares the provided string as a safe HTML attribute.
functions
docs
parent
functions
strings
safeHTMLAttr INPUT

Given a site configuration that contains this menu entry:

{{< code-toggle file="hugo" >}} menu.main name = "IRC" url = "irc://irc.freenode.net/#golang" {{< /code-toggle >}}

Attempting to use the url value directly in an attribute:

{{ range site.Menus.main }}
  <a href="{{ .URL }}">{{ .Name }}</a>
{{ end }}

Will produce:

<a href="#ZgotmplZ">IRC</a>

ZgotmplZ is a special value, inserted by Go's template/html package, that indicates that unsafe content reached a CSS or URL context.

To indicate that the HTML attribute is safe:

{{ range site.Menus.main }}
  <a {{ printf "href=%q" .URL | safeHTMLAttr }}>{{ .Name }}</a>
{{ end }}

{{% note %}} As demonstrated above, you must pass the HTML attribute name and value through the function. Applying safeHTMLAttr to the attribute value has no effect. {{% /note %}}