Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for escaping template values #11

Open
asdcdow opened this issue Oct 29, 2013 · 0 comments
Open

Add support for escaping template values #11

asdcdow opened this issue Oct 29, 2013 · 0 comments

Comments

@asdcdow
Copy link

asdcdow commented Oct 29, 2013

I really like the syntax for the Bliss templates. The only thing keeping me from using it is that it doesn't HTML escape template values. This makes it very difficult to to prevent XSS issues. Please add support for doing this by default.

Also, if you do add support for this, make sure you provide a way to bypass the escaping because sometimes you do need to put raw values in templates.

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant