mustache.js

33MB

Struktur: 36edf6874b

Autor	SHA1	Nachricht	Datum
Phillip Johnsen	378bcca8a5	Improve HTML escaping. This closes a couple of potential exploit scenarios. Backtick (`) for older IEs and equals (=) for unquoted attributes. Refs `83b8e846a3` Closes https://github.com/janl/mustache.js/pull/388	vor 10 Jahren
Michael Jackson	b8a14eafe9	Strict escaping of ampersands	vor 14 Jahren
Michael Jackson	fbc66a8140	Another rewrite - Cleaner separation of responsibilities in the code between scanning, parsing, compiling, and rendering functions. - Much faster	vor 14 Jahren
Chad Weider	e2d919a214	Strict HTML escape. This replaces the soft escaping ('&' -> '&') with strict escaping ('&' -> '&amp;'). This new behavior matches that of Ruby and other Mustache implementations. Other points: - `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode. - Forward slash is added to escape list c/o OWASP recommendations.	vor 14 Jahren
Michael Jackson	f127f48bf4	Move all tests to spec directory	vor 14 Jahren
Jan Lehnardt	8df3bef014	don't doublt encode entities. Closes #19 . Patch by Leeoniya	vor 16 Jahren
Jan Lehnardt	50f8035e3e	add test suite, implement escaping	vor 16 Jahren