mustache.js

Chad Weider e2d919a214 Strict HTML escape. This replaces the soft escaping ('&' -> '&') with strict escaping ('&' -> '&amp;'). This new behavior matches that of Ruby and other Mustache implementations. Other points: - `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode. - Forward slash is added to escape list c/o OWASP recommendations.	il y a 14 ans
..
_files	Strict HTML escape.	il y a 14 ans
mustache_spec.rb	Remove ability to use a "streaming" function	il y a 14 ans

Chad Weider e2d919a214 Strict HTML escape.

This replaces the soft escaping ('&amp;' -> '&amp;') with strict escaping ('&amp;' -> '&amp;amp;'). This new behavior matches that of Ruby and other Mustache implementations.

Other points:
- `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode.
- Forward slash is added to escape list c/o OWASP recommendations.

il y a 14 ans

_files

Strict HTML escape.

il y a 14 ans

mustache_spec.rb

Remove ability to use a "streaming" function

il y a 14 ans