Store HTML to MongoDB with Mongoose as a String and View it as HTML

Question

I have been trying to save some part of my page as html in my mongodb database using mongoose, here's what my Schema looks like

var projectSchema = new mongoose.Schema({
    title: String,
    subtitle: String,
    description: [],
    thumbnail: String,
    images: [String],
    keywords: [String],
    hours: Number,
    tools: [String],
    views: Number,
    created: {
        type: Date,
        default: Date.now
    }
});

it's the one called "description", and in my HTML I loop over the array and extract the string, then try to view it as HTML but it always shows up as text, here's my EJS file

<% var description = project.description %>
<% description.forEach(function(description){ %>
    <%= description %>
<% }); %>

now after that it just prints the string to my page and doesn't render it as HTML

Edit: Now it works by using <%- %> instead of <%= %>

Use <%- description %>

Explosion Pills
– Explosion Pills

2016-02-15 00:34:46 +00:00
Commented Feb 15, 2016 at 0:34 — Explosion Pills
– Explosion Pills, Commented Feb 15, 2016 at 0:34
It worked, thank you :)

user4570382
– user4570382

2016-02-15 00:36:04 +00:00
Commented Feb 15, 2016 at 0:36 — user4570382
– user4570382, Commented Feb 15, 2016 at 0:36

Explosion Pills · Accepted Answer · 2016-02-15 00:40:26Z

2

EJS has various tags for different kinds of output. <%= will output escaped html. If you want to output unescaped html so it is rendered as html, use <%-.

Be aware of the dangers of cross site scripting and injection. Make sure that your HTML is safe to output or that you strip out dangerous tags and attributes. There are several packages out there that can help sanitize HTML to make it safe(r) for output such as https://www.npmjs.com/package/sanitize-html

answered Feb 15, 2016 at 0:40

Explosion Pills

192k56 gold badges341 silver badges417 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Store HTML to MongoDB with Mongoose as a String and View it as HTML

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related