Files
hugo/content/functions/safeCSS.md
T
2017-03-27 14:33:35 -05:00

1.3 KiB

title, linktitle, description, godocref, date, publishdate, lastmod, categories, tags, ns, signature, workson, hugoversion, relatedfuncs, deprecated, aliases
title linktitle description godocref date publishdate lastmod categories tags ns signature workson hugoversion relatedfuncs deprecated aliases
safecss safeCSS Declares the provided string as a known "safe" CSS string. https://golang.org/src/html/template/content.go?s=919:929#L15 2017-02-01 2017-02-01 2017-02-26
functions
style
css
strings
safeHTML
safeHTMLAttr
false

safeCSS declares the provided string as a known "safe" CSS string so that Go html/templates will not filter it as unsafe.

In this context, safe means CSS content that matches any of the following:

  1. The CSS3 stylesheet production, such as p { color: purple }.
  2. The CSS3 rule production, such as a[href=~"https:"].foo#bar.
  3. CSS3 declaration productions, such as color: red; margin: 2px.
  4. The CSS3 value production, such as rgba(0, 0, 255, 127).

Example: Given style = "color: red;" defined in the front matter of your .md file:

  • <p style="{{ .Params.style | safeCSS }}">…</p><p style="color: red;">…</p>
  • <p style="{{ .Params.style }}">…</p><p style="ZgotmplZ">…</p>

{{% note "ZgotmplZ" %}} "ZgotmplZ" is a special value that indicates that unsafe content reached a CSS or URL context. {{% /note %}}