manifestXmlJsonml does not escape content, nor is there an escape for html/xml
Open
- Dominant language
- Jsonnet
- Stars
- 7.6k
- Forks
- 475
- PR merge metrics
- No merged PRs in 30d
Description
How does one properly escape user inputs / data for insertion into contents of a tag?
```bash
[scr@R9459YDHVQ]$ jsonnet -S -e 'function(vars) std.manifestXmlJsonml(["statement", vars.statement])' --tla-code vars='{"statement": "5 < 4"}'
5 < 4
```
(Yes the statement is false 😄 , as is the output - it _should_ be `5 < 4`)
Contributor guide
Assessment
This issue has not been assessed yet.