aboutsummaryrefslogtreecommitdiffstats
path: root/book/src (unfollow)
Commit message (Collapse)AuthorFilesLines
2024-01-24Add poem integrationHEADmainLibravatar cel 🌸2-1/+13
2024-01-22Mention that whitespace control is not allowed on `extends` in the bookLibravatar Guillaume Gomez1-0/+10
2024-01-18docs: fix a typoLibravatar Marcos Brito1-1/+1
2024-01-12Add documentation for `as_ref` builtin filterLibravatar Guillaume Gomez1-0/+18
2023-12-18Fix typoLibravatar Sadika Sumanapala1-1/+1
2023-11-28Add documentation for macro named argumentsLibravatar Guillaume Gomez1-3/+48
2023-11-07Add missing link to template expansionLibravatar Guillaume Gomez1-0/+1
2023-11-07Add new chapter in the askama book about template expansionLibravatar Guillaume Gomez1-0/+485
2023-11-07document function syntax in templatesLibravatar Thomas Threadgold1-0/+116
2023-10-30Improve the macros sectionLibravatar Mo1-5/+4
2023-10-23Extend documentation about using block/macro name when "ending" itLibravatar Guillaume Gomez1-0/+14
2023-10-03Advertise Discord channel instead of GitterLibravatar Dirkjan Ochtman1-1/+1
2023-08-09Add section in book about using constants in templatesLibravatar Guillaume Gomez1-0/+22
2023-07-21There's no mention of name afterwardsLibravatar Justin Abrahms1-1/+1
2023-06-28Add section for performance tipsLibravatar wrapperup2-0/+17
2023-06-21Added example on how to use super()Libravatar reportingissue1-1/+2
2023-05-31Allow delimiters with arbitrary lengthLibravatar René Kijewski1-2/+2
2023-04-03Improve whitespace documentationLibravatar Raimundo Saona1-2/+27
2023-03-13Add documentation for whitespace argument in template derive proc-macroLibravatar Guillaume Gomez1-0/+14
2023-03-09Add documentation for + sign in whitespace controlLibravatar Guillaume Gomez1-0/+12
2023-03-06Add subsections for configuration chapter (#787)Libravatar Guillaume Gomez1-0/+4
2022-11-16Extend documentation of custom filtersLibravatar Raimundo Saona1-5/+56
2022-11-07Fix some minor issues in escape documentation.Libravatar AndrolGenhald1-2/+2
2022-10-21Version bump in README and bookLibravatar Allan Zhang2-2/+2
I was going through the book when I saw the version was still 0.8. This commit ensures all references to Askama version are to 0.11.2. Most of them already were. Merge whenever appropriate for release, #722 related
2022-07-20Update to comrak v0.14Libravatar René Kijewski1-1/+1
2022-06-09Document macro import syntax.Libravatar Owen Jacobson1-0/+8
This was a source of some frustration working on a port of a toy app to askama. The tests do help, but having this called out in the docs would have saved me an hour or two.
2022-04-26Add documentation for `~` and `"minimize"`Libravatar Guillaume Gomez1-3/+18
2022-04-21Update `whitespace` documentationLibravatar Guillaume Gomez1-2/+2
2022-04-21Add documentation for "config" parameterLibravatar Guillaume Gomez1-2/+9
2022-04-21Add documentation for suppress_whitespaceLibravatar Guillaume Gomez1-1/+28
2022-02-21Book: document markdown filterLibravatar René Kijewski1-0/+25
2022-02-21Book: add TOC to filtersLibravatar René Kijewski1-1/+48
2022-02-16Make json filter safeLibravatar René Kijewski1-25/+47
Previously the built-in json filter had an issue that made it unsafe to use in HTML data. When used in HTML attributes an attacker who is able to supply an arbitrary string that should be JSON encoded could close the containing HTML element e.g. with `"</div>"`, and write arbitrary HTML code afterwards as long as they use apostrophes instead of quotation marks. The programmer could make this use case safe by explicitly escaping the JSON result: `{{data|json|escape}}`. In a `<script>` context the json filter was not usable at all, because in scripts HTML escaped entities are not parsed outside of XHTML documents. Without using the safe filter an attacker could close the current script using `"</script>"`. This PR fixes the problem by always escaping less-than, greater-than, ampersand, and apostrophe characters using their JSON unicode escape sequence `\u00xx`. Unless the programmer explicitly uses the safe filter, quotation marks are HTML encoded as `&quot`. In scripts the programmer should use the safe filter, otherwise not.
2022-02-02Update README.md, sync with the bookLibravatar René Kijewski1-2/+3
2021-11-27Add Axum integrationLibravatar Michael Alyn Miller1-0/+12
2021-11-19Updated book to include optional escaper for escape filterLibravatar vallentin1-0/+22
2021-08-05Remove the askama_iron integrationLibravatar Dirkjan Ochtman1-12/+0
This web framework seems not to have been updated for quite a while, and its current version appears to depend on vulnerable crates. Remove it for now. If someone wants to fix up Iron upstream and reinstate this, I'd be happy to review your PR.
2021-03-22updated the book to describe the new paragraphbreaks filterLibravatar mbuscemi1-0/+18
2021-01-06Added missing punctuation and backticksLibravatar vallentin1-14/+16
2021-01-06Added abs filter to bookLibravatar vallentin1-0/+14
2020-12-30Updated book to include tojson aliasLibravatar vallentin1-1/+3
2020-12-26Updated book to be on par with readmeLibravatar vallentin1-6/+1
2020-12-25Updated book to include let shadowLibravatar vallentin1-1/+11
2020-12-18Updated book to include nested commentsLibravatar vallentin1-1/+10
2020-12-16Updated book to include set aliasLibravatar vallentin1-1/+3
2020-11-21Fix small wording issues in bookLibravatar Fabian WĂĽrfl1-2/+2
2020-10-26Fix links and actions which were broken since the default branch was renamed ↵Libravatar jake2-7/+7
from master to main
2020-08-25Use efficient method for nested template renderingLibravatar Dirkjan Ochtman1-2/+3
2020-07-23Fix filter docs to clarify whitespace handlingLibravatar Dirkjan Ochtman1-16/+18
2020-07-14askama tideLibravatar Jacob Rothstein1-0/+9
generated by cgit (git 2.34.1) at 2024-11-22 09:20:05 +0000