dqrmkdu25623 2019-03-02 18:06
浏览 27
已采纳

通过html / template删除传递的参数周围的空格

When i pass argument to onclick function i got spaces around that argument, why and how remove them?

t, _ := template.New("").Parse(`<div onclick="test({{.}})">{{.}}</div>`)
t.Execute(os.Stdout, 1)

Result:

<div onclick="test( 1 )">1</div>

playground

Edit:

Updated by Dave help, from template we can do something like this:

t, _ := template.New("").Funcs(template.FuncMap{
    "test": func(i interface{}) template.JS {
        switch i.(type) {
        case int:
            s := strconv.Itoa(i.(int))
            return template.JS(s)   
        // other types
        default:
            panic("bad type")
        }
    },
}).Parse(`<div onclick="test({{test .}})">{{.}}</div>`)
t.Execute(os.Stdout, 1)

playground

  • 写回答

1条回答 默认 最新

  • duange2971 2019-03-02 19:43
    关注

    It's a result of Golang doing some things to ensure that malicious JS doesn't end up in your template. If you specify that what you are passing in is safe for javascript, it will work fine.

    type JS

    Use of this type presents a security risk: the encapsulated content should come from a trusted source, as it will be included verbatim in the template output.

    https://play.golang.org/p/TUOECg1YDtl

    t.Execute(os.Stdout, template.JS("1"))
    

    Result:

    <div onclick="test(1)">1</div>
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 孟德尔随机化怎样画共定位分析图
  • ¥18 模拟电路问题解答有偿速度
  • ¥15 CST仿真别人的模型结果仿真结果S参数完全不对
  • ¥15 误删注册表文件致win10无法开启
  • ¥15 请问在阿里云服务器中怎么利用数据库制作网站
  • ¥60 ESP32怎么烧录自启动程序
  • ¥50 html2canvas超出滚动条不显示
  • ¥15 java业务性能问题求解(sql,业务设计相关)
  • ¥15 52810 尾椎c三个a 写蓝牙地址
  • ¥15 elmos524.33 eeprom的读写问题