You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current markup context for variables output to HTML text is html. The HTL spec is not 100% clear about this. For use cases, where the source data is assumed to be safe it would be benefitial to change the default markup context to unsafe, i.e. to bypass any xss sanitizer.
The text was updated successfully, but these errors were encountered:
# [3.0.0](v2.3.2...v3.0.0) (2019-06-05)
### Features
* **compiler:** allow to set default context ([5c735d0](5c735d0)), closes [#69](#69)
* **runtime:** Add support for DOM variables ([d4bab4c](d4bab4c)), closes [#62](#62)
### BREAKING CHANGES
* **runtime:** the response from the runtime template is no longer an object, but the generated string or document.
The current markup context for variables output to HTML text is
html
. The HTL spec is not 100% clear about this. For use cases, where the source data is assumed to besafe
it would be benefitial to change the default markup context tounsafe
, i.e. to bypass any xss sanitizer.The text was updated successfully, but these errors were encountered: