xml-html-qq is currently using textSetting from heterocephalus, which makes the xml, xmlUnsafe, and html function NOT escape template variables.
It would be nice to provide different versions of the xml, xmlUnsafe, and html functions (using htmlSetting) which DO escape template variables.
xml-html-qq is currently using
textSettingfrom heterocephalus, which makes thexml,xmlUnsafe, andhtmlfunction NOT escape template variables.It would be nice to provide different versions of the
xml,xmlUnsafe, andhtmlfunctions (usinghtmlSetting) which DO escape template variables.