haml/test/escaping.js

Haml ported to server-side Javascript. This is a traditional server-side templating language.

{
  locals: {
    apos: "'",
    amp: '&',
    carrots: '<>',
    quo: '"',
    sol: '/',
    attr:[
      '""><SCRIPT>alert("XSS")</SCRIPT>',
      'javascript:alert(String.fromCharCode(88,83,83)'
    ]
  }
}