hugo/tpl
Rodolfo Carvalho e22b3f54c3 tpl: Fix internal templates usage of safeHTMLAttr
The `safeHTMLAttr` function operates on a full attribute definition, not
just within the attribute value.

Docs: https://gohugo.io/functions/safehtmlattr/

For `opengraph.html`, run the whole `content` HTML attribute through
`safeHTMLAttr`. That will preserve `+` signs in formatted dates.

For `vimeo_simple.html`, `safeHTMLAttr` was in the context of an
attribute value, thus having no effect. In this case we could replace it
with `safeURL`, but since the code is coming from an API it is safer to
just let Go's template engine sanitize the value as it already does with
`provider_url`.

Fixes #5236 (no need to change Go upstream)
Related to #5246
2019-05-17 16:00:54 +02:00
..
cast
collections tpl: Provide more detailed errors in Where 2019-04-27 09:54:22 +02:00
compare tpl/compare: Fix nil compare in eq/ne for interface values 2019-04-29 18:43:44 +02:00
crypto
data
encoding
fmt
hugo tpl: Fix hugo package name and add godocs 2019-04-27 22:44:57 +02:00
images
inflect
internal
lang
math
os
partials
path
reflect tpl: Fix hugo package name and add godocs 2019-04-27 22:44:57 +02:00
resources
safe
site tpl: Fix hugo package name and add godocs 2019-04-27 22:44:57 +02:00
strings
templates
time
tplimpl tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00
transform
urls
template.go
template_info.go
template_test.go