Log inSign up
postpostscript
postpostscripthtml
Public
Like
2
html
Val Town is a collaborative website to build and scale JavaScript apps.
Deploy APIs, crons, & store data – all from the browser, and deployed in milliseconds.
Sign up now
Code
/
Search
README.md

html: create sanitized HTML using tagged templates

Examples

Create val
import { html } from "https://esm.town/v/postpostscript/html"

const unsafeInput = "<script>alert(1)</script>"

console.log(html`Value: ${unsafeInput}`)
// Value: &lt;script&gt;alert(1)&lt;/script&gt;

These can be combined -- HTML marked as safe (instance is RawHTML) will be directly inserted:

Create val
const scripts = html`<script>alert(1)</script>`

console.log(html`<head>
  ${scripts}
</head>`.toString())
// <head>
//   <script>alert(1)</script>
// </head>

To easily create HTTP Response outputs like @stevekrouse/html, use the htmlResponse utility:

Create val
import { html, htmlResponse } from "https://esm.town/v/postpostscript/html";

export default function(req: Request) {
  return htmlResponse`
    Request URL: ${decodeURIComponent(req.url)}
  `;
}

Tests: @postpostscript/htmlTest

Migrated from folder: HTML/html

Code