Mustache.js: replacement of < and > with < and >
Some of my data objects use ready HTML with regular tags surrounded by "<" and ">" . Mustache.js converts these to < and >. Doing a String.replace(/>/g,'>').replace(/</g,'<') on the resultant output introduces a lot of lag.
Is this is expected behavior? Can it be changed to preserve the <'s and >'s? Should these symbols be escaped somehow?
amper5and
All 5 comments
Outputting data with {{data}} (double mustache) always escapes html characters. Use {{{data}}} (triple mustache) if you don't want it escaped.
thedufer
on 8 Aug 2011
oh, cool! I didn't know that. thanks, thedufer.
amper5and
on 8 Aug 2011
@amper5and: Note that if you use {{{ data }}} it's _your_ responsibility to make sure you're not creating XSS or CSRF vulnerabilities, as you're bypassing the mechanism designed to prevent that :)
bobthecow
on 8 Aug 2011
Also, I believe the syntax {{&data}} is equivalent, although I've never used it.
thedufer
on 8 Aug 2011
that cool👍！！！
githubwangxu
on 17 Dec 2019
Related issues
Immortalin
·
12Comments
rlightner
·
7Comments
chlab
·
11Comments
zekth
·
18Comments
MatthijsZw
·
18Comments
Most helpful comment
Outputting data with
{{data}}(double mustache) always escapes html characters. Use{{{data}}}(triple mustache) if you don't want it escaped.