html

Summary

Tagged template helper for creating SafeHtml values.

let unsafe = '<script>alert(1)</script>'
let safe = html`<h1>${unsafe}</h1>`
assert.equal(String(safe), '<h1>&lt;script&gt;alert(1)&lt;/script&gt;</h1>')

To interpolate raw HTML without escaping, use html.raw as a template tag. This has the same semantics as String.raw but for HTML snippets that have already been escaped or are from trusted sources.

let icon = '<b>OK</b>'
let safe = html.raw`<div>${icon}</div>`
assert.equal(String(safe), '<div><b>OK</b></div>')

Signature

const html: HtmlTemplateTag;