Skip to content

raw-html.md

Latest commit

 

History

History
15 lines (10 loc) · 460 Bytes

raw-html.md

File metadata and controls

15 lines (10 loc) · 460 Bytes
Raw

Raw HTML

Plain { expr } values are HTML-escaped. Use gsx.Raw only when a trusted or sanitized string must render as markup.

Rendering trusted HTML

Security

gsx.Raw writes the supplied HTML without escaping. The value must already be trusted or sanitized; never pass it unvalidated user input. See Escaping for the other explicit trust boundaries.