Go html/template: Why Auto-Escaping Is Your Friend
Go's html/template escapes output automatically — that is the feature, not a limitation. How it stops the XSS you would otherwise write, and where it gets in the way.
Go's html/template escapes output automatically — that is the feature, not a limitation. How it stops the XSS you would otherwise write, and where it gets in the way.