Escaping HTML in Apps

HTML escaping causes certain characters in the text ("&", "<", and ">") to be converted into HTML-safe character strings.

HTML escaping in templates is controlled by the value of escapeHTMLInTemplates in the file framework_config.json. If your application does not already have a framework_config.json file, create one in the application directory.

By default, HTML escaping is turned on in the HP webOS SDK.

HTML escaping is important unless you are sure that the content is safe, because unescaped HTML that is interpreted by the application can have unintended consequences.

Usage

To turn off HTML escaping in templates, place the value "escapeHTMLInTemplates":false in framework_config.json:

{ "escapeHTMLInTemplates": false }

To turn on HTML escaping in templates, place the value "escapeHTMLInTemplates":true in framework_config.json:

{ "escapeHTMLInTemplates": true }

With HTML escaping turned on, you can add a leading hyphen ('-') to any property reference in the template to prevent its HTML from being escaped:

#{-myPropertyWithHTML}