hugo/tpl/tplimpl/embedded/templates
Rodolfo Carvalho e22b3f54c3 tpl: Fix internal templates usage of safeHTMLAttr
The `safeHTMLAttr` function operates on a full attribute definition, not
just within the attribute value.

Docs: https://gohugo.io/functions/safehtmlattr/

For `opengraph.html`, run the whole `content` HTML attribute through
`safeHTMLAttr`. That will preserve `+` signs in formatted dates.

For `vimeo_simple.html`, `safeHTMLAttr` was in the context of an
attribute value, thus having no effect. In this case we could replace it
with `safeURL`, but since the code is coming from an API it is safer to
just let Go's template engine sanitize the value as it already does with
`provider_url`.

Fixes #5236 (no need to change Go upstream)
Related to #5246
2019-05-17 16:00:54 +02:00
..
_default
shortcodes tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00
disqus.html tpl/tplimpl: Replace deprecated .GetParam usage 2019-04-09 16:39:12 +02:00
google_analytics.html
google_analytics_async.html
google_news.html
opengraph.html tpl: Fix internal templates usage of safeHTMLAttr 2019-05-17 16:00:54 +02:00
pagination.html Misc paginator adjustments 2019-04-08 11:02:12 +02:00
schema.html
twitter_cards.html