Skip to content

fix: use triple-brace interpolation to prevent HTML-escaping#25

Closed
marc0olo wants to merge 1 commit intomainfrom
fix/triple-brace-interpolation
Closed

fix: use triple-brace interpolation to prevent HTML-escaping#25
marc0olo wants to merge 1 commit intomainfrom
fix/triple-brace-interpolation

Conversation

@marc0olo
Copy link
Copy Markdown
Member

@marc0olo marc0olo commented Mar 20, 2026

Summary

  • Switch all Handlebars value interpolations from {{ }} to {{{ }}} across all four recipe templates (asset-canister, motoko, prebuilt, rust)
  • Handlebars double-braces HTML-escape output by default (e.g. &&&&), which breaks shell commands in the generated YAML
  • Add triple-brace interpolation guidance to CLAUDE.md

Fixes #24

Handlebars double-braces HTML-escape output by default, turning `&&`
into `&&` and breaking shell commands. Since recipes generate
YAML/shell (not HTML), all value interpolations should use unescaped
triple-braces `{{{ }}}`.

Fixes #24
@marc0olo marc0olo requested a review from a team as a code owner March 20, 2026 11:16
@marc0olo marc0olo closed this Mar 20, 2026
@marc0olo
Copy link
Copy Markdown
Member Author

this was fixed in the cli already and doesn't happen with icp-cli v0.2.1 anymore:

@marc0olo marc0olo deleted the fix/triple-brace-interpolation branch March 20, 2026 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Build commands with && are HTML-escaped in asset-canister recipe

1 participant