strict mode about jquery-tmpl HOT 8 CLOSED

I believe nested data access should be permitted as well, e.g.: a.b.c, but not a.b().c.

from jquery-tmpl.

See also https://github.com/jquery/jquery-tmpl/issues#issue/66:
Better error handling options

from jquery-tmpl.

In the draft spec, http://wiki.jqueryui.com/w/page/37898666/Template , if you wish to restrict substitutions you can implement a verifier pass that rejects any "=" node that has content that does not fall in some subset of member expressions. See plugin compiler passes in section 9.

Be aware though that you cannot rely on control not escaping just because there is no explicit function call. Implicit valueOf, toString can cause control to escape, (new Image).src="javascript:...", and getters/setters can all cause non-obvious side-effects.

from jquery-tmpl.

what are the possibilities of including a verifier in core? As default?
I can write the verifier, if a patch would be accepted.

from jquery-tmpl.

Thanks for taking the time to submit this issue. Just wanted to let you know this plugin is no longer being actively developed or maintained by the jQuery team. See README for more info.

from jquery-tmpl.

thanks. It was a good goal--jquery would have benefited from a single templating engine--but there seems to be contradicting usecases in JS world to truly consolidate. Long live handlebars.js?

from jquery-tmpl.

jQuery can still have and benefit from a single template engine, it will just be maintained by the jQuery UI team. The previous version wasn't developed with them as stakeholders and so had different design goals. For this reason, the design and development was started afresh, rather than continuing in this project.

Surely there will always be plenty of choices when it comes to templating engines. jQuery UI will provide an interface that will support using your own favorite template engine, but will only fully support the one it ships. This is an example of a goal that wasn't initially part of the jquery-tmpl project.

from jquery-tmpl.

For the codeless (strict) approach, see also the ongoing work on JsRender. Take a look at this post for more context.

from jquery-tmpl.