Comments (3)
I agree... But just to be clear, once we make this change, if the content is still wrapped in HTML()
, there's no harm done, right? (important for backward compatibility and for people that don't realize that there's been a change...)
from htmltools.
It would be great if all my old tags$script(HTML(...))
work. Thanks so much for all your work on this.
from htmltools.
I didn't take this step in the past because I thought it best to be explicit about where strings were not going to be escaped, and therefore, where you might be vulnerable to code injection attacks. However, on second thought it doesn't matter in this case--we're already talking about a script tag, so a malicious user wouldn't need to worry about <
or >
characters, they're literally already in the context they want to be to inject code.
So yeah, I guess there is not a reason to not do this.
from htmltools.
Related Issues (20)
- Add `tagQuery()` `$matches(cssSelector)` functionality
- Feature request: `removeDependencies()`
- Documentation: `suppressDependencies()` doesn't say that it works by setting the version to 9999
- Support hyphens in tag/element css selectors HOT 1
- tagQuery does not allow ":" to exist in tag type when searching HOT 1
- Cannot install new version of htmltools 0.5.4 HOT 3
- Update htmltools from 0.5.3 to 0.5.4 in Google Colab with R HOT 9
- Documentation: show examples of using htmlDependency
- `tagAppendChildren` and other functions using `tagQuery` cannot select elements at top level. HOT 1
- `tagQuery()`'s `find()` method error out on objects that contain formulas
- Make it easier to render a tag as an iframe HOT 1
- Non-fill tags shrink inside a fill container context HOT 1
- Allow `bindFillRole()`'s `item` and `container` to accept options HOT 1
- Cannot install htmltools 0.5.5 due to a compilation error HOT 2
- tagAppendAttributes() et al doesn't work with non-tagified objects
- `runtime: shiny` in Rmarkdown doesn't know how to handle htmlDependency() HOT 5
- Q: How to add additional CSS to `saveWidget` generated html file HOT 1
- `bindFillRole` warning on object type `shiny.tag.list` HOT 4
- includeMarkdown doesnot render the `<id>` of the headers. HOT 5
- Add `includeHTMLDocument()` to embed a complete document
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from htmltools.