javascript - What are the benefits of using <%- tag v/s <%= tag in ejs? -
when should 1 use <%- tag? since <%- unescaped, wouldnt leave application vulnerable attacks?
you'd use when have trusted html in variable.
for example, if run chunk of data through markdown parser generate html.
Comments
Post a Comment