mirror of
https://github.com/caddyserver/caddy.git
synced 2025-04-08 06:00:04 -04:00
Using html/template.HTML like we were doing before caused nested include to be HTML-escaped, which breaks sites. Now we do not escape any of the output; template input is usually trusted, and if it's not, users should employ escaping actions within their templates to keep it safe. The docs already said this.