Skip to content
This repository was archived by the owner on Sep 5, 2018. It is now read-only.

Commit ca07ead

Browse files
committed
Merge pull request #110 from yahoo/minor-update-readme-hyperlink
Update README.md
2 parents fd71e14 + 0a8ce39 commit ca07ead

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ When output expressions are found inside dangerous (yet-to-be-supported) context
119119
<div onclick="hello(this.getAttribute('data-name'))" data-name="{{name}}">
120120
```
121121

122-
- *Case 2A.* the data will be used as URI/HTML output<br/>The contextual analyzer does not (cannot) evaluate your JavaScript code, and thus lacks the information on which contexts the data will be ultimately used. Therefore, you must manually apply the escaping filters including `uriData` (a patched `encodeURI()`), `uriComponentData` (alias of `encodeURIComponent()`), and the [xss-filters](https://github.com/yahoo/xss-filters#client-side-browser) that are already registered as Handlebars helpers.
122+
- *Case 2A.* the data will be used as URI/HTML output<br/>The contextual analyzer does not (cannot) evaluate your JavaScript code, and thus lacks the information on which contexts the data will be ultimately used. Therefore, you must manually apply the escaping filters including `uriData` (a patched `encodeURI()`), `uriComponentData` (alias of `encodeURIComponent()`), and the [xss-filters](https://github.com/yahoo/xss-filters#the-api) that are already registered as Handlebars helpers.
123123
```html
124124
<script>
125125
function search(url, keyword) {

0 commit comments

Comments
 (0)