askama - [no description]

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add documentation for "config" parameter	Guillaume Gomez	2022-04-21	1	-2/+9
\|
*	Add documentation for suppress_whitespace	Guillaume Gomez	2022-04-21	1	-1/+28
\|
*	Book: document markdown filter	René Kijewski	2022-02-21	1	-0/+25
\|
*	Book: add TOC to filters	René Kijewski	2022-02-21	1	-1/+48
\|
*	Make json filter safe	René Kijewski	2022-02-16	1	-25/+47
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Previously the built-in json filter had an issue that made it unsafe to use in HTML data. When used in HTML attributes an attacker who is able to supply an arbitrary string that should be JSON encoded could close the containing HTML element e.g. with `"</div>"`, and write arbitrary HTML code afterwards as long as they use apostrophes instead of quotation marks. The programmer could make this use case safe by explicitly escaping the JSON result: `{{data\|json\|escape}}`. In a `<script>` context the json filter was not usable at all, because in scripts HTML escaped entities are not parsed outside of XHTML documents. Without using the safe filter an attacker could close the current script using `"</script>"`. This PR fixes the problem by always escaping less-than, greater-than, ampersand, and apostrophe characters using their JSON unicode escape sequence `\u00xx`. Unless the programmer explicitly uses the safe filter, quotation marks are HTML encoded as `&quot`. In scripts the programmer should use the safe filter, otherwise not.
*	Update README.md, sync with the book	René Kijewski	2022-02-02	1	-2/+3
\|
*	Add Axum integration	Michael Alyn Miller	2021-11-27	1	-0/+12
\|
*	Updated book to include optional escaper for escape filter	vallentin	2021-11-19	1	-0/+22
\|
*	Remove the askama_iron integration	Dirkjan Ochtman	2021-08-05	1	-12/+0
\| \| \| \| \| \| \|	This web framework seems not to have been updated for quite a while, and its current version appears to depend on vulnerable crates. Remove it for now. If someone wants to fix up Iron upstream and reinstate this, I'd be happy to review your PR.
*	updated the book to describe the new paragraphbreaks filter	mbuscemi	2021-03-22	1	-0/+18
\|
*	Added missing punctuation and backticks	vallentin	2021-01-06	1	-14/+16
\|
*	Added abs filter to book	vallentin	2021-01-06	1	-0/+14
\|
*	Updated book to include tojson alias	vallentin	2020-12-30	1	-1/+3
\|
*	Updated book to be on par with readme	vallentin	2020-12-26	1	-6/+1
\|
*	Updated book to include let shadow	vallentin	2020-12-25	1	-1/+11
\|
*	Updated book to include nested comments	vallentin	2020-12-18	1	-1/+10
\|
*	Updated book to include set alias	vallentin	2020-12-16	1	-1/+3
\|
*	Fix small wording issues in book	Fabian Würfl	2020-11-21	1	-2/+2
\|
*	Fix links and actions which were broken since the default branch was renamed ↵	jake	2020-10-26	2	-7/+7
\| \| \| \|	from master to main
*	Use efficient method for nested template rendering	Dirkjan Ochtman	2020-08-25	1	-2/+3
\|
*	Fix filter docs to clarify whitespace handling	Dirkjan Ochtman	2020-07-23	1	-16/+18
\|
*	askama tide	Jacob Rothstein	2020-07-14	1	-0/+9
\|
*	Prune duplicate documentation	Dirkjan Ochtman	2020-06-30	1	-2/+2
\|
*	Single capital in section titles	Dirkjan Ochtman	2020-06-30	1	-3/+3
\|
*	Move optional filter documentation into filters section	Dirkjan Ochtman	2020-06-30	2	-25/+26
\|
*	Initial Askama Book (#332)	cetra3	2020-06-29	9	-0/+1011