commit - 91f04f84f656877b279035f9926f0126203e75b6
commit + 6b30ed5032859c86d52d8214b6456eebee35900c
blob - 55bd2e2e2aa557f2565a390f5554c9a49079fff7
blob + 8a4a68d12107e18f42bbaaf6a965b7748cd3353a
--- layouts/_partials/attrs.html
+++ layouts/_partials/attrs.html
{{- if ne $value nil -}}
{{- if eq (printf "%T" $value) "bool" -}}
{{- if $value -}}
- {{- printf " %s" $name | safeHTMLAttr -}}
+ {{- printf " %s" $name | safeHTML -}}
{{- end -}}
{{- else -}}
- {{- printf " %s=%q" $name $value | safeHTMLAttr -}}
+ {{- printf " %s=%q" $name $value | safeHTML -}}
{{- end -}}
{{- end -}}
{{- end -}}
blob - 8e6c39548689ac4ab96b8ea70a4439ecbe306962
blob + 35905089bbea580c1c50623492c9afae9f3a7573
--- layouts/_partials/head/favicon.html
+++ layouts/_partials/head/favicon.html
) -}}
{{- end -}}
- <link{{ partial "attrs.html" $attributes }}>
+ <link{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{- end -}}
{{- end -}}
blob - 9c54707dfa43337e4b7d38c5bdf40fac5f45a796
blob + 8e58f6512ba4c8e98429c68bddd78563b187c83d
--- layouts/_partials/image.html
+++ layouts/_partials/image.html
"type" "image/avif"
"srcset" $avif.srcset
"sizes" $sizes
- ) }}>
- <img{{ partial "attrs.html" $attributes }}>
+ ) | safeHTMLAttr }}>
+ <img{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
</picture>
{{/* Lossless: WebP */}}
{{- else -}}
- <img{{ partial "attrs.html" $attributes }}>
+ <img{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{- end -}}
(dict "src" $image.RelPermalink)
-}}
- <img{{ partial "attrs.html" $attributes }}>
+ <img{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{- end -}}
(dict "src" $src)
-}}
- <img{{ partial "attrs.html" $attributes }}>
+ <img{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{- else -}}
blob - 7f3b64a0ef18c2199acece85168cc9c359c58533
blob + f3dbef1dda5f192a8eed48999fc837e3038da4b1
--- layouts/_shortcodes/a.html
+++ layouts/_shortcodes/a.html
"allowed" $allowed
) -}}
-<a{{ partial "attrs.html" $attributes }}>
+<a{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{ .Inner }}
</a>
blob - 1fbc779b37e04de07d90167dc50c7b2a5ba6aede
blob + 00445ca2edc8d9c18de9059fcd6a296479248acc
--- layouts/_shortcodes/section.html
+++ layouts/_shortcodes/section.html
"allowed" $allowed
) -}}
-<section{{ partial "attrs.html" $attributes }}>
+<section{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{ .Inner }}
</section>
blob - 0c2c104a94a01d3ca17d2ad2e9742783997e256b
blob + 4db4a103a12d17de58e661367006301ead533366
--- layouts/_shortcodes/source.html
+++ layouts/_shortcodes/source.html
"type" $type
) -}}
-<source{{ partial "attrs.html" $attributes }}>
+<source{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
blob - 6a15da496d704cb08b9e79ddb78e1f1d7e8ab7a6
blob + d32b7ab4fb2a7ac3ed1bd28a63ccce76d7429898
--- layouts/_shortcodes/video.html
+++ layouts/_shortcodes/video.html
{{- $attributes = merge $defaults $attributes -}}
-<video{{ partial "attrs.html" $attributes }}>
+<video{{ partial "attrs.html" $attributes | safeHTMLAttr }}>
{{ .Inner }}
</video>