发布于 2016-10-09 07:18:46 | 155 次阅读 | 评论: 0 | 来源: 网友投递
Thymeleaf HTML5模板引擎
Thymeleaf是一个XML/XHTML/HTML5模板引擎，可用于Web与非Web环境中的应用开发。它是一个开源的Java库，基于Apache License 2.0许可，由Daniel Fernández创建，该作者还是Java加密库Jasypt的作者。
Thymeleaf 3.0.2发布了，Thymeleaf 是一个XML/XHTML/HTML5模板引擎，可用于Web与非Web环境中的应用开发。
本次更新日志：
- Fixed <head> being aggressively auto-closed by block tags inside <script> or <template> tags, which
caused JavaScript template fragments to be incorrectly inserted from other templates.
- Fixed Jackson not escaping '</' in JavaScript/JSON literals, which could allow code injection that
prematurely closed </script> tags when browsers display pages in HTML mode.
- Fixed JavaScript/JSON literals not escaping amperand (&), which could allow code injection that
prematurely closed </script> tags when browsers display pages in XHTML (application/xhtml+xml) mode.
- Improved error handling during Jackson initialization.
- Updated AttoParser dependency to 2.0.1.RELEASE.
- Updated Unbescape dependency to 1.1.4.RELEASE.
- Updated OGNL dependency to 3.1.10, removed direct dependency on javassist.
下载地址：http://www.thymeleaf.org/download.html