![Oracle Drags Its Feet in the JavaScript Trademark Dispute](https://cdn.sanity.io/images/cgdhsj6q/production/919c3b22c24f93884c548d60cbb338e819ff2435-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Oracle Drags Its Feet in the JavaScript Trademark Dispute
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
html-template-tag-stream
Advanced tools
ES6 Tagged Template for compiling HTML template streams.
This package is distributed via npm:
npm install html-template-tag
It can also be used in Deno.
At its core, this module just performs simple ES6 string interpolation.
import html from "html-template-tag-stream"
var name = `Jon`
var string = ""
for await (const s of html`Hello, ${name}!`) {
string += s
}
// "Hello, Jon!"
Nevertheless, it escapes HTML special characters without refraining its use in loops!
import html from "html-template-tag-stream"
var names = ["Jon", "George", "/><script>alert('xss')</script>"];
var string = ""
var template = html`
<ul>
${names.map((name) => html`
<li>Hello, ${name}!</li>
`)}
</ul>
`
for await (const s of template) {
string += s
}
// "<ul><li>Hello, Jon!</li><li>Hello, George!</li><li>Hello, /><script>alert('xss')</script>!</li></ul>"
You can use double dollar signs in interpolation to mark the value as safe (which means that this variable will not be escaped).
var name = `<strong>Jon</strong>`;
var string = ""
for await (var s of html`Hello, $${name}!`) {
string += s
}
// "Hello, <strong>Antonio</strong>!"
This small module can also be used to pre-compile HTML templates:
import html from "html-template-tag-stream"
var data = {
count: 2,
names: ["Jon", "George"]
}
var template = ({names}) => html`
<ul>
${names.map((name) => html`
<li>Hello, ${name}!</li>
`)}
</ul>
`
var string = ""
for await (var s of template(data)) {
string += s
}
/*
"
<ul>
<li>Hello, Antonio!</li>
<li>Hello, Megan!</li>
</ul>
"
*/
NB: The formatting of the string literal is kept.
That's not all the things you can do with this. Here's a more complex example for a more realistic case beyond what the original library used. You can use this to stream HTML from a server or from a service worker.
const encoder = new TextEncoder()
function streamResponse(generator) {
let { body, headers } =
"body" in generator
? generator
: { body: generator, headers: {} }
const stream = new ReadableStream({
async start(controller : ReadableStreamDefaultController<any>) {
for await (let s of body) {
controller.enqueue(encoder.encode(s))
}
controller.close()
}
})
return new Response(
stream, {
headers: {
"content-type": "text/html; charset=utf-8",
...headers
}
})
}
See the tests for all the types you can pass in!
ISC
Originally based off of https://github.com/AntonioVdlC/html-template-tag. Which was in turn inspired by:
The code for this module has been heavily inspired on Axel Rauschmayer's post on HTML templating with ES6 template strings and Stefan Bieschewski's comment.
FAQs
ES6 Tagged Template for compiling HTML template streams.
The npm package html-template-tag-stream receives a total of 3 weekly downloads. As such, html-template-tag-stream popularity was classified as not popular.
We found that html-template-tag-stream demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Oracle seeks to dismiss fraud claims in the JavaScript trademark dispute, delaying the case and avoiding questions about its right to the name.
Security News
The Linux Foundation is warning open source developers that compliance with global sanctions is mandatory, highlighting legal risks and restrictions on contributions.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.