hugo/tpl/tplimpl
Rodolfo Carvalho e22b3f54c3 tpl: Fix internal templates usage of safeHTMLAttr
The `safeHTMLAttr` function operates on a full attribute definition, not
just within the attribute value.

Docs: https://gohugo.io/functions/safehtmlattr/

For `opengraph.html`, run the whole `content` HTML attribute through
`safeHTMLAttr`. That will preserve `+` signs in formatted dates.

For `vimeo_simple.html`, `safeHTMLAttr` was in the context of an
attribute value, thus having no effect. In this case we could replace it
with `safeURL`, but since the code is coming from an API it is safer to
just let Go's template engine sanitize the value as it already does with
`provider_url`.

Fixes #5236 (no need to change Go upstream)
Related to #5246
2019-05-17 16:00:54 +02:00
..
embedded tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00
ace.go
amber_compiler.go
shortcodes.go
shortcodes_test.go
template.go hugolib: Avoid recloning of shortcode templates 2019-04-24 12:37:57 +02:00
template_ast_transformers.go
template_ast_transformers_test.go
template_errors.go
template_funcs.go
template_funcs_test.go i18n: Move the package below /langs 2019-05-04 18:25:56 +02:00
template_info_test.go
templateFuncster.go
templateProvider.go