I always quite liked hiccup… until I realised it doesn’t autoescape strings

@glenjamin hiccup 2!!

is that a thing?

https://github.com/weavejester/hiccup/blob/master/CHANGELOG.md#200-alpha1-2017-01-15

I mean, it's alpha, but it fixes that

I did ask James about it once a few years ago, but he said it was tricky because strings were used as intermediate forms

and perf would be hard if it had to stay as data until render for every fragment

no idea. seems to be implemented though. ¯\(ツ)/¯

Hiccup 2 uses a custom type as an intermediate form to get around the problem. But that does mean that the API is a little different; (str (html [:span "foo"])) instead of just (html [:span "foo"]).

To maintain backward compatibility, the 2.0 alpha puts the new stuff in hiccup2.core.