Mustache: Globally disable html escaping?

Question

Is there a way how I can (without modifying the sources of mustache) disable the HTML escaping? I'm using mustache for other things and dont want to have the following entities escaped.

var entityMap = {   "&": "&amp;",   "<": "&lt;",   ">": "&gt;",   '"': '&quot;',   "'": '&#39;',   "/": '&#x2F;' }; 

Given a template like foo '{{bar}}' and a view { bar : 1 }will produce foo '1&#39.

Answer 1

It's actually pretty simple. Mustache offers the possibility to override the escape function. This allows you to disable the escaping by simply returning the original value.

mustache.escape = function (value) {     return value; }; 

As mentioned by others, you can also use the following notation to disable escaping.

{{{ test }}} 

I leave the answer unchanged, since it might be helpful to implement your own sanitizing.

Answer 2

If you are trying to just NOT HTML escape some strings, you just do {{{xx}}} instead of {{xx}}

As per:

http://mustache.github.io/mustache.5.html

So if you had a string that consisted of:

test => Q & A

Calling with:

{{ test }} 

would give you:

Q & A 

..but calling with:

{{{ test }}} or {{ &test }} 

Would give you just:

q & a