66 lines
1.2 KiB
Go
66 lines
1.2 KiB
Go
|
package raymond
|
||
|
|
|
||
|
|
import (
|
||
|
|
"bytes"
|
||
|
|
"strings"
|
||
|
|
)
|
||
|
|
|
||
|
|
//
|
||
|
|
// That whole file is borrowed from https://github.com/golang/go/tree/master/src/html/escape.go
|
||
|
|
//
|
||
|
|
// With changes:
|
||
|
|
// ' => '
|
||
|
|
// " => "
|
||
|
|
//
|
||
|
|
// To stay in sync with JS implementation, and make mustache tests pass.
|
||
|
|
//
|
||
|
|
|
||
|
|
type writer interface {
|
||
|
|
WriteString(string) (int, error)
|
||
|
|
}
|
||
|
|
|
||
|
|
const escapedChars = `&'<>"`
|
||
|
|
|
||
|
|
func escape(w writer, s string) error {
|
||
|
|
i := strings.IndexAny(s, escapedChars)
|
||
|
|
for i != -1 {
|
||
|
|
if _, err := w.WriteString(s[:i]); err != nil {
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
var esc string
|
||
|
|
switch s[i] {
|
||
|
|
case '&':
|
||
|
|
esc = "&"
|
||
|
|
case '\'':
|
||
|
|
esc = "'"
|
||
|
|
case '<':
|
||
|
|
esc = "<"
|
||
|
|
case '>':
|
||
|
|
esc = ">"
|
||
|
|
case '"':
|
||
|
|
esc = """
|
||
|
|
default:
|
||
|
|
panic("unrecognized escape character")
|
||
|
|
}
|
||
|
|
s = s[i+1:]
|
||
|
|
if _, err := w.WriteString(esc); err != nil {
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
i = strings.IndexAny(s, escapedChars)
|
||
|
|
}
|
||
|
|
_, err := w.WriteString(s)
|
||
|
|
return err
|
||
|
|
}
|
||
|
|
|
||
|
|
// Escape escapes special HTML characters.
|
||
|
|
//
|
||
|
|
// It can be used by helpers that return a SafeString and that need to escape some content by themselves.
|
||
|
|
func Escape(s string) string {
|
||
|
|
if strings.IndexAny(s, escapedChars) == -1 {
|
||
|
|
return s
|
||
|
|
}
|
||
|
|
var buf bytes.Buffer
|
||
|
|
escape(&buf, s)
|
||
|
|
return buf.String()
|
||
|
|
}
|