Does purejs HTML-escape values

[Pipalayan Nayak]

Hi,
I am new to pure.js . When rendering with pure.js, i find that pure.js
does not HTML escape values. Is it the correct way, or am i missing
something?

code example
var tab_li_directive = {
'ul li':{
'tb<-tabList':{
'span':"tb.tabName',
'@id':function(a) {
return "tinid-" + a.item.tabId;
},
'@class':function(a) {
if (a.pos == 0)
return "tab-class tab-selected";
else
return "tab-class";
}
}
}
}
$('.fbbodydiv-class #tab-div').render(R$.fbPgTab.v.fbPageDtls,
tab_li_directive);

Here, since the tabName is directly rendered into the span, i think it
should be HTML escaped.

Regards.

[Mic (BeeBole)]

The string is kept as is, as you may want to generate unescaped HTML.
eg: for partials or recursive template calls.

In your case, you need to make an utility function to escape it.

[pipl...@hirerabbit.com]

Mic, thanks for the clarification!