Escaping doesn't work well #30

clinyong · 2014-11-12T08:48:25Z

@variable will automatically escape the variable, but I found that the escaping doesn't work in layout.

The text was updated successfully, but these errors were encountered:

clinyong · 2014-11-12T10:05:24Z

The template file, it depends on the layout.

@{
    import {
        "tpl/user/layout/base"
    }

    <div>
        @user.Name
    </div>
}

The layout file, base.gohtml

@{
    var body string
}

<!DOCTYPE html>
<html lang="en">
    <head></head>
    <body>
       @body
       <div>@user.Name</div>
    </body>
</html>

If user.Name is Leo<div> , in the layout file, the @body is Leo<div>, but the @user.Name is Leo<div>.

Wuvist · 2014-12-01T10:26:51Z

Wuvist closed this as completed Dec 1, 2014

Provide feedback