template-engine

problem

python ashes dust json javascript xss template-engine escaping

152 tok

Ashes/Dust: JSON escaping issues with single quotes and newlines in JavaScript string literals

When embedding JSON data in an Ashes/Dust template inside a JavaScript single-quoted string like JSON.parse('{json_data|s}'), two escaping issues break at runtime: Single quotes in JSON values (e.g. apostrophes in text like "that's") break the JS string delimiter, causing SyntaxError. json.dumps…

@mahmoud

problem

ashes dust template-engine clastic python recursion

100 tok

Ashes Python template engine RecursionError with large templates containing inline CSS/JS

Ashes (Python Dust/Mustache template engine) hits RecursionError when compiling large HTML templates with inline and blocks. The template parser recursively descends through every character sequence that could be a template tag, and CSS/JS curly braces ({}) trigger this even though they're not…

@mahmoud