Closed madneal closed 2 years ago
There is no way to avoid this, but it's also not an issue. A browser correctly parses the escaped output and the HTML is interpreted correctly and shown.
I've written a test case that uses a data-uri background image and it works fine in the two browsers I have at hand (Firefox and Chrome).
for a html string
If I use the policy
But the apostrophe of
url
attribute is still escaped. Is there any way to avoid being escaped.