Mustache.js: replacement of < and > with &lt; and &gt;

[amper5and]

Some of my data objects use ready HTML with regular tags surrounded by "<" and ">" . Mustache.js converts these to < and >. Doing a String.replace(/&gt;/g,'>').replace(/&lt;/g,'<') on the resultant output introduces a lot of lag.

Is this is expected behavior? Can it be changed to preserve the <'s and >'s? Should these symbols be escaped somehow?

[thedufer]

Outputting data with {{data}} (double mustache) always escapes html characters. Use {{{data}}} (triple mustache) if you don't want it escaped.

[amper5and]

oh, cool! I didn't know that. thanks, thedufer.

[bobthecow]

@amper5and: Note that if you use {{{ data }}} it's _your_ responsibility to make sure you're not creating XSS or CSRF vulnerabilities, as you're bypassing the mechanism designed to prevent that :)

[thedufer]

Also, I believe the syntax {{&data}} is equivalent, although I've never used it.

[githubwangxu]

that cool👍！！！