mirror of
https://github.com/gohugoio/hugo.git
synced 2024-11-07 20:30:36 -05:00
b9bd35d72e
git-subtree-dir: docs git-subtree-split: fdea5430f89dfd849d39212abdf5ace0a4763e5a
1.2 KiB
1.2 KiB
title | description | godocref | date | publishdate | lastmod | categories | menu | keywords | signature | workson | hugoversion | relatedfuncs | deprecated | aliases | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
safeCSS | Declares the provided string as a known "safe" CSS string. | https://golang.org/src/html/template/content.go?s=919:929#L15 | 2017-02-01 | 2017-02-01 | 2017-02-26 |
|
|
|
|
|
false |
In this context, safe means CSS content that matches any of the following:
- The CSS3 stylesheet production, such as
p { color: purple }
. - The CSS3 rule production, such as
a[href=~"https:"].foo#bar
. - CSS3 declaration productions, such as
color: red; margin: 2px
. - The CSS3 value production, such as
rgba(0, 0, 255, 127)
.
Example: Given style = "color: red;"
defined in the front matter of your .md
file:
<p style="{{ .Params.style | safeCSS }}">…</p>
→<p style="color: red;">…</p>
<p style="{{ .Params.style }}">…</p>
→<p style="ZgotmplZ">…</p>
{{% note "ZgotmplZ" %}} "ZgotmplZ" is a special value that indicates that unsafe content reached a CSS or URL context. {{% /note %}}