mustache.js

Chad Weider e2d919a214 Strict HTML escape. This replaces the soft escaping ('&' -> '&') with strict escaping ('&' -> '&amp;'). This new behavior matches that of Ruby and other Mustache implementations. Other points: - `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode. - Forward slash is added to escape list c/o OWASP recommendations.	14年前
..
_files	Strict HTML escape.	14年前
mustache_spec.rb	Remove ability to use a "streaming" function	14年前

Chad Weider e2d919a214 Strict HTML escape.

This replaces the soft escaping ('&amp;' -> '&amp;') with strict escaping ('&amp;' -> '&amp;amp;'). This new behavior matches that of Ruby and other Mustache implementations.

Other points:
- `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode.
- Forward slash is added to escape list c/o OWASP recommendations.

14年前

_files

Strict HTML escape.

14年前

mustache_spec.rb

Remove ability to use a "streaming" function

14年前