aeosynth / ck Goto Github PK

• (ck.compile -> div -> div a for a in ['1','2'])({})

This template wil generate the following HTML, but also includes a comma...

• <div><div>1</div><div>2</div>,</div>

I think it's generated by line 37

https://github.com/mikesmullin/coffee-templates

This will give an error complaining about the dot from @a.b

• (ck.compile -> div id: 'a', @a.b)({context: {a: {b: 'B'}}})

Surrounding the statement with parans seems to work around it tho.

• (ck.compile -> div id: 'a', (@a.b))({context: {a: {b: 'B'}}})

template = ck.compile -> h2 "Hi, #{@name}"
context = {name: 'Bobby <script>alert("Hacked!")</script>'}
console.log template {context, autoescape: on}

throws

ReferenceError: esc is not defined
    at nest (.../node_modules/ck/lib/ck.coffee:46:41)