diff --git a/doc/articles/wiki/edit.html b/doc/articles/wiki/edit.html index c14953b17b..044c3bedea 100644 --- a/doc/articles/wiki/edit.html +++ b/doc/articles/wiki/edit.html @@ -1,6 +1,6 @@ -
html/template
to the list of imports:
import ( + "html/template" "http" "io/ioutil" "os" - "html/template" )@@ -397,10 +397,11 @@ Template directives are enclosed in double curly braces. The
printf "%s" .Body
instruction is a function call
that outputs .Body
as a string instead of a stream of bytes,
the same as a call to fmt.Printf
.
-The |html
part of each directive pipes the value through the
-html
formatter before outputting it, which escapes HTML
-characters (such as replacing >
with >
),
-preventing user data from corrupting the form HTML.
+The html/template
package helps guarantee that only safe and
+correct-looking HTML is generated by template actions. For instance, it
+automatically escapes any greater than sign (>
), replacing it
+with >
, to make sure user data does not corrupt the form
+HTML.
diff --git a/doc/articles/wiki/view.html b/doc/articles/wiki/view.html index 0233915774..b1e87efe80 100644 --- a/doc/articles/wiki/view.html +++ b/doc/articles/wiki/view.html @@ -1,5 +1,5 @@ -
[edit]
+[edit]
-