Files
hugo/docs/content/en/functions/safeCSS.md
2021-10-31 13:53:55 +01:00

1.1 KiB

title, description, date, publishdate, lastmod, categories, menu, keywords, signature, workson, hugoversion, relatedfuncs, deprecated, aliases
title description date publishdate lastmod categories menu keywords signature workson hugoversion relatedfuncs deprecated aliases
safeCSS Declares the provided string as a known "safe" CSS string. 2017-02-01 2017-02-01 2017-02-26
functions
docs
parent
functions
style
css
strings
safeCSS INPUT
safeHTML
safeHTMLAttr
false

In this context, safe means CSS content that matches any of the following:

  1. The CSS3 stylesheet production, such as p { color: purple }.
  2. The CSS3 rule production, such as a[href=~"https:"].foo#bar.
  3. CSS3 declaration productions, such as color: red; margin: 2px.
  4. The CSS3 value production, such as rgba(0, 0, 255, 127).

Example: Given style = "color: red;" defined in the front matter of your .md file:

  • <p style="{{ .Params.style | safeCSS }}">…</p><p style="color: red;">…</p>
  • <p style="{{ .Params.style }}">…</p><p style="ZgotmplZ">…</p>

{{% note "ZgotmplZ" %}} "ZgotmplZ" is a special value that indicates that unsafe content reached a CSS or URL context. {{% /note %}}