Document safe.JSStr function

content/en/functions/safeCSS.md

@@ -12,6 +12,7 @@ relatedFuncs:
   - safe.HTML
   - safe.HTMLAttr
   - safe.JS
+  - safe.JSStr
   - safe.URL
 signature:
   - safe.CSS INPUT

content/en/functions/safeHTML.md

@@ -12,6 +12,7 @@ relatedFuncs:
   - safe.HTML
   - safe.HTMLAttr
   - safe.JS
+  - safe.JSStr
   - safe.URL
 signature:
   - safe.HTML INPUT

content/en/functions/safeHTMLAttr.md

@@ -12,6 +12,7 @@ relatedFuncs:
   - safe.HTML
   - safe.HTMLAttr
   - safe.JS
+  - safe.JSStr
   - safe.URL
 signature:
   - safe.HTMLAttr INPUT

content/en/functions/safeJS.md

@@ -12,6 +12,7 @@ relatedFuncs:
   - safe.HTML
   - safe.HTMLAttr
   - safe.JS
+  - safe.JSStr
   - safe.URL
 signature:
   - safe.JS INPUT

content/en/functions/safeJSStr.md

@@ -0,0 +1,59 @@
+---
+title: safeJSStr
+description: Declares the provided string as a known safe JavaScript string.
+categories: [functions]
+menu:
+  docs:
+    parent: functions
+keywords: []
+namespace: safe
+relatedFuncs:
+  - safe.CSS
+  - safe.HTML
+  - safe.HTMLAttr
+  - safe.JS
+  - safe.JSStr
+  - safe.URL
+signature:
+  - safe.JSStr INPUT
+  - safeJSStr INPUT
+---
+
+Encapsulates a sequence of characters meant to be embedded between quotes in a JavaScript expression. Use of this type presents a security risk: the encapsulated content should come from a trusted source, as it will be included verbatim in the template output.
+  
+Without declaring a variable to be a safe JavaScript string:
+
+```go-html-template
+{{ $title := "Lilo & Stitch" }}
+<script>
+  const a = "Title: " + {{ $title }};
+</script>
+```
+
+Rendered:
+
+
+```html
+<script>
+  const a = "Title: " + "Lilo \u0026 Stitch";
+</script>
+```
+
+To avoid escaping by Go's [html/template] package:
+
+```go-html-template
+{{ $title := "Lilo & Stitch" }}
+<script>
+  const a = "Title: " + {{ $title | safeJSStr }};
+</script>
+```
+
+Rendered:
+
+```html
+<script>
+  const a = "Title: " + "Lilo & Stitch";
+</script>
+```
+
+[html/template]: https://pkg.go.dev/html/template

content/en/functions/safeURL.md

@@ -13,6 +13,7 @@ relatedFuncs:
   - safe.HTML
   - safe.HTMLAttr
   - safe.JS
+  - safe.JSStr
   - safe.URL
 signature:
   - safe.URL INPUT