英文:
Golang Martini Templates Just Showing HTML when Rendering Markdown
问题
我正在使用Golang、Martini、Martini-Contrib Renderer包和Blackfriday编写一个简单的博客。
我能够将帖子存入数据库并从数据库中取出，没有任何问题。我甚至能够将帖子的正文作为HTML从数据库中取出并放入我的结构体中，但是当我们渲染模板时，输出只是普通的文本HTML，而不是应该显示的漂亮样式。
代码托管在这里：
http://bitbucket.org/ChasingLogic/goblog
任何帮助都将不胜感激。
编辑：
你可以在这里看到它的效果：
英文:
I am working on writing a simple blog in Golang using Martini, the Martini-Contrib Renderer package, and Blackfriday.
I am able to get the post into the DB and out of the DB with no issues. I even get the Body of the post out of the DB and into my struct as html however when we render the template the output is just plain text html and not looking pretty like it should.
Code is hosted here:
http://bitbucket.org/ChasingLogic/goblog
Any help would be great.
EDIT:
You can see what it's doing here:
答案1
得分: 2
Golang模板默认会对变量进行转义。当变量包含HTML且来源可信时，可以使用template.HTML代替string。
http://golang.org/pkg/html/template/#HTML
> type HTML string
>
> HTML封装了一个已知安全的HTML文档片段。它不应该用于来自第三方的HTML，也不应该用于包含未闭合标签或注释的HTML。经过可靠的HTML清理器处理的输出和通过此包转义的模板可用于HTML。
我会通过以下方式进行修复：
将
type Post struct {
Title string
Body string
Author string
Date string
}
改为
type Post struct {
Title string
Body template.HTML
Author string
Date string
}
然后将
post.Body = string(blackfriday.MarkdownCommon([]byte(preFormatMarkdown)))
改为
post.Body = template.HTML(blackfriday.MarkdownCommon([]byte(preFormatMarkdown)))
英文:
Golang templates escape variables by default. You can use template.HTML instead of string when it contains HTML and the source is trusted (which, in this instance, it seems to be).
http://golang.org/pkg/html/template/#HTML
> type HTML string
>
> HTML encapsulates a known safe HTML document fragment. It should not be used for HTML from a third-party, or HTML with unclosed tags or comments. The outputs of a sound HTML sanitizer and a template escaped by this package are fine for use with HTML.
The way I would fix it would be by changing this
type Post struct {
Title string
Body string
Author string
Date string
}
to
type Post struct {
Title string
Body template.HTML
Author string
Date string
}
And then change
post.Body = string(blackfriday.MarkdownCommon([]byte(preFormatMarkdown)))
to
post.Body = template.HTML(blackfriday.MarkdownCommon([]byte(preFormatMarkdown)))
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论