Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

design a safe mechanism for binding markup into a "hole" in a template. #9

Open
rafaelw opened this issue Aug 24, 2012 · 3 comments
Open

Comments

@rafaelw
Copy link
Collaborator

rafaelw commented Aug 24, 2012

No description provided.

@ajklein
Copy link
Owner

ajklein commented Aug 29, 2012

What do we mean by "safe" here? If we allow treating a bound string as markup, there's not much safety to be had. Off the top of my head the main safety to be had would be if we allowed binding to some constructed DOM hung off the model (sort of a model-as-template). Or is there something else we can do?

@rafaelw
Copy link
Collaborator Author

rafaelw commented Aug 29, 2012

Abarth's original plan about this sort of mirrored the approach that ruby
takes which is to allow markup to be evaluated, but limited by a policy in
what constructs can be contained in the markup.

It's possible that this is an orthogonal, but related primitive that we
need to raise. In any case, it seems like it's a requirement that there by
some mechanism for achieving this.

On Wed, Aug 29, 2012 at 10:17 AM, Adam Klein notifications@github.comwrote:

What do we mean by "safe" here? If we allow treating a bound string as
markup, there's not much safety to be had. Off the top of my head the main
safety to be had would be if we allowed binding to some constructed DOM
hung off the model (sort of a model-as-template). Or is there something
else we can do?


Reply to this email directly or view it on GitHubhttps://github.com//issues/9#issuecomment-8133366.

@ajklein
Copy link
Owner

ajklein commented Aug 29, 2012

Ah, right, like "only and tags allowed". Does sound like a primitive missing...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants