Markup is not respected. about htpy HOT 3 OPEN

This may be a bit confusing at first, but attributes are always escaped, regardless of whether or not it contains markup. This is a feature and this allows you to actually pass HTML fragments or script fragments.

Consider this htpy code:

button(onclick="let name = 'andreas'; alert('hi' + name);")["Say hi"]

The value of the attributes is escaped with ' to avoid breaking the quotes. The browser understands that and parses it as the proper quotes so it all works:

I realized that this behavior is not documented, will add a note to the docs about it!

from htpy.

Thanks for the quick reply. It addresses my concerns.

from htpy.

Reopening this issue until it's documented properly 🙂

from htpy.