Feeding Data into Templates | Web Development with Jade

Escaping

By default, Jade encodes HTML characters for security, so:

Jade	HTML
- html_content = "Hello <em>World</em>" p= html_content	<p>Hello <em>World</em></p>

And, of course:

Jade	HTML
- html_content = "Hello <em>World</em>" p #{html_content}	<p>Hello <em>World</em></p>

This is great for preventing cross-site scripting (XSS) attacks, and even just displaying innocent code examples without needing to encode them yourself. However, it will mess up content that is supposed to be HTML, such as the text provided by most content management systems. So, we need a way of telling Jade (as illustrated in the following code) when it shouldn't escape our text:

Jade	HTML
- html_content = "Hello <em>World</em>" p!= html_content	<p>Hello <em>World</em></p>

And:

Jade	HTML
- html_content = "Hello <em>World</em>" p !{html_content}	<p>Hello <em&gt...

Tech Concepts

Programming languages

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Web Development with Jade

By : Sean Lang

Web Development with Jade

By: Sean Lang

Overview of this book

Escaping

Web Development with Jade

By : Sean Lang

Web Development with Jade

By: Sean Lang

Overview of this book

Escaping

Confirmation

Buy this book with your credits?

Submit Your Feedback

Create a Free Account To Continue Reading

Sign in to activate your 7-day free access