mirror of
https://github.com/gohugoio/hugo.git
synced 2026-08-24 23:38:53 +00:00
4e0bca2b1e
We need to rework the whole template func docs and, while a good idea, this does not fit into that.
1.3 KiB
1.3 KiB
title, description, godocref, date, publishdate, lastmod, categories, menu, signature, workson, hugoversion, relatedfuncs, deprecated, aliases
| title | description | godocref | date | publishdate | lastmod | categories | menu | signature | workson | hugoversion | relatedfuncs | deprecated | aliases | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| safecss | Declares the provided string as a known "safe" CSS string. | https://golang.org/src/html/template/content.go?s=919:929#L15 | 2017-02-01 | 2017-02-01 | 2017-02-26 |
|
|
|
|
false |
safeCSS declares the provided string as a known "safe" CSS string so that Go html/templates will not filter it as unsafe.
In this context, safe means CSS content that matches any of the following:
- The CSS3 stylesheet production, such as
p { color: purple }. - The CSS3 rule production, such as
a[href=~"https:"].foo#bar. - CSS3 declaration productions, such as
color: red; margin: 2px. - The CSS3 value production, such as
rgba(0, 0, 255, 127).
Example: Given style = "color: red;" defined in the front matter of your .md file:
<p style="{{ .Params.style | safeCSS }}">…</p>→<p style="color: red;">…</p><p style="{{ .Params.style }}">…</p>→<p style="ZgotmplZ">…</p>
{{% note "ZgotmplZ" %}} "ZgotmplZ" is a special value that indicates that unsafe content reached a CSS or URL context. {{% /note %}}