1
94%
master: 99%

Ran 09 Jun 2016 09:47PM UTC

Files 19

Run time 0s

Badge

Embed ▾

Committed 09 Jun 2016 09:45PM UTC coverage: 93.596% (+0.1%) from 93.457%

Subproject # 318.1

Build Type

push

travis-ci

Committed by

tbranyen

Commit Message

Fixes bugs with tagged template helper and escape

The tagged template helper will now escape any interpolated text values.
This is a safer approach to directly injecting markup. If you wish to
embed raw markup you can use the `html` method directly like so:

    function render() {
      let escaped = '<script>window.alert('xss')</script>';
      let unescaped = '<center>of attention</center>';

      outerHTML(document.body, html`<body>
        <p>Escaped: ${escaped}</p>
        <p>Unescaped: ${html(unescaped)}</p>
      </body>`);
    }

    render();

This patch also addresses two bugs with the parser. Text preceding the
first defined element would be discarded. Another bug was with two
dynamic interpolated values being right next to eachother not
transforming properly.

Run Details

760 of 812 relevant lines covered (93.6%)

1290.91 hits per line

tbranyen / diffhtml / 318 / 1
94%
master: 99%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 318.1

tbranyen / diffhtml / 318 / 1 94% master: 99%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 318.1

tbranyen / diffhtml / 318 / 1
94%
master: 99%

README BADGES
x