phoenix/hugo
1
0
Fork 0
mirror of https://github.com/gohugoio/hugo.git synced 2024-07-14 21:07:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
hugo/tpl/tplimpl/embedded
History
Rodolfo Carvalho e22b3f54c3 tpl: Fix internal templates usage of safeHTMLAttr 
The `safeHTMLAttr` function operates on a full attribute definition, not
just within the attribute value.

Docs: https://gohugo.io/functions/safehtmlattr/

For `opengraph.html`, run the whole `content` HTML attribute through
`safeHTMLAttr`. That will preserve `+` signs in formatted dates.

For `vimeo_simple.html`, `safeHTMLAttr` was in the context of an
attribute value, thus having no effect. In this case we could replace it
with `safeURL`, but since the code is coming from an API it is safer to
just let Go's template engine sanitize the value as it already does with
`provider_url`.

Fixes #5236 (no need to change Go upstream)
Related to #5246
2019-05-17 16:00:54 +02:00
..
generate all: Apply staticcheck recommendations 2019-03-24 16:14:51 +01:00
templates tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00
.gitattributes tpl/tplimpl: Make the autogenerated templates collapsed in PRs 2018-08-23 22:03:43 +02:00
README.md tpl: Fix golint godoc issues 2018-09-07 08:25:51 +02:00
templates.autogen.go tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00

README.md

Build Templates

If you add or modify any template in the templates folder, you also need to run mage generate to get the Go code in synch.