pelme/htpy

An exported "safe" element

Rhys-R opened this issue · 2 comments

Hello! I was using htpy with flask and noticed that strings included in an htpy element are auto-escaped by default. This is obviously fine and good, but when trying to insert something like a hardcoded query-string or a script tag that uses &, I noticed that they get escaped as well. I found a workaround by looking at how markupsafe works (wrapping the script or url in a class that provides an __html__ attr), but it required a bit of digging.

Would it be out of scope to provide an exported safe "pseudo-tag", which just escapes the auto-escaping?

Does wrapping your markup in markupsafe.Markup work for you?

https://htpy.dev/usage/#injecting-markup

Urgh... looks like I was digging in the wrong spot. Sorry for not RTFMing hard enough! Thank you for your work on the library!