diff options
author | Matthew Holt <mholt@users.noreply.github.com> | 2020-04-06 12:50:54 -0600 |
---|---|---|
committer | Matthew Holt <mholt@users.noreply.github.com> | 2020-04-06 12:51:53 -0600 |
commit | 437d5095a6c9aabbabf900417724e655bd4de234 (patch) | |
tree | b6aa16c973c67bf51fe7e6dba16144a2b5365481 /cmd/commandfuncs.go | |
parent | 145aebbba50e9ed5487ecc24b0e0ca384842ccc0 (diff) |
templates: Use text/template; add experimental notice to docs
Using html/template.HTML like we were doing before caused nested include
to be HTML-escaped, which breaks sites. Now we do not escape any of the
output; template input is usually trusted, and if it's not, users should
employ escaping actions within their templates to keep it safe. The docs
already said this.
Diffstat (limited to 'cmd/commandfuncs.go')
0 files changed, 0 insertions, 0 deletions