Template Strings

Exemple
const appName = 'Wishtack';
const userName = 'Foo';
const greetings = `Hi ${userName},
Welcome to ${appName}!`
​
console.log(greetings);
​
// Result:
// Hi Foo,
// Welcome to Wishtack!
Vulnérabilité Sécurité
N'utilisez jamais les template strings comme outil de templating HTML.
Cela vous expose à des vulnérabilités de type XSS (Cross-Site Scripting).
Exemple :
/* userName is dynamically retrieved from malicious source:
 * query string, api, storage etc... */
const userName = '<img src=404 onerror=alert(1)>'; 
document.body.innerHTML = `<span>Hi ${userName}</span>`
​

Arrow Functions

Syntactic Sugar

Dernière mise à jour 2 years ago