dqrmkdu25623 2019-03-02 18:06
浏览 27
已采纳

通过html / template删除传递的参数周围的空格

When i pass argument to onclick function i got spaces around that argument, why and how remove them?

t, _ := template.New("").Parse(`<div onclick="test({{.}})">{{.}}</div>`)
t.Execute(os.Stdout, 1)

Result:

<div onclick="test( 1 )">1</div>

playground

Edit:

Updated by Dave help, from template we can do something like this:

t, _ := template.New("").Funcs(template.FuncMap{
    "test": func(i interface{}) template.JS {
        switch i.(type) {
        case int:
            s := strconv.Itoa(i.(int))
            return template.JS(s)   
        // other types
        default:
            panic("bad type")
        }
    },
}).Parse(`<div onclick="test({{test .}})">{{.}}</div>`)
t.Execute(os.Stdout, 1)

playground

  • 写回答

1条回答 默认 最新

  • duange2971 2019-03-02 19:43
    关注

    It's a result of Golang doing some things to ensure that malicious JS doesn't end up in your template. If you specify that what you are passing in is safe for javascript, it will work fine.

    type JS

    Use of this type presents a security risk: the encapsulated content should come from a trusted source, as it will be included verbatim in the template output.

    https://play.golang.org/p/TUOECg1YDtl

    t.Execute(os.Stdout, template.JS("1"))
    

    Result:

    <div onclick="test(1)">1</div>
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 执行 virtuoso 命令后,界面没有,cadence 启动不起来
  • ¥50 comfyui下连接animatediff节点生成视频质量非常差的原因
  • ¥20 有关区间dp的问题求解
  • ¥15 多电路系统共用电源的串扰问题
  • ¥15 slam rangenet++配置
  • ¥15 有没有研究水声通信方面的帮我改俩matlab代码
  • ¥15 ubuntu子系统密码忘记
  • ¥15 信号傅里叶变换在matlab上遇到的小问题请求帮助
  • ¥15 保护模式-系统加载-段寄存器
  • ¥15 电脑桌面设定一个区域禁止鼠标操作