mirror of
https://github.com/caddyserver/caddy.git
synced 2026-05-29 10:12:32 -04:00
437d5095a6
Using html/template.HTML like we were doing before caused nested include to be HTML-escaped, which breaks sites. Now we do not escape any of the output; template input is usually trusted, and if it's not, users should employ escaping actions within their templates to keep it safe. The docs already said this.