mustache.js

Chad Weider e2d919a214 Strict HTML escape. This replaces the soft escaping ('&' -> '&') with strict escaping ('&' -> '&amp;'). This new behavior matches that of Ruby and other Mustache implementations. Other points: - `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode. - Forward slash is added to escape list c/o OWASP recommendations.	před 14 roky
..
_files	Strict HTML escape.	před 14 roky
mustache_spec.rb	Remove ability to use a "streaming" function	před 14 roky

Chad Weider e2d919a214 Strict HTML escape.

This replaces the soft escaping ('&amp;' -> '&amp;') with strict escaping ('&amp;' -> '&amp;amp;'). This new behavior matches that of Ruby and other Mustache implementations.

Other points:
- `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode.
- Forward slash is added to escape list c/o OWASP recommendations.

před 14 roky

_files

Strict HTML escape.

před 14 roky

mustache_spec.rb

Remove ability to use a "streaming" function

před 14 roky