pass 'escape' => false to format_string

[christianp]

fixes #56

[codecov-commenter]

Codecov Report

Merging #57 into master will not change coverage.
The diff coverage is 0.00%.

@@            Coverage Diff            @@
##             master      #57   +/-   ##
=========================================
  Coverage     18.08%   18.08%           
  Complexity      453      453           
=========================================
  Files            43       43           
  Lines          3982     3982           
=========================================
  Hits            720      720           
  Misses         3262     3262           

Impacted Files	Coverage Δ	Complexity Δ
locallib.php	6.52% <0.00%> (ø)	0.00 <0.00> (ø)

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update eaf990b...7027837. Read the comment docs.

[Dagefoerde]

Hi, thanks for suggesting a fix. Do you know where and how the strings that your fix modifies are actually rendered into output?

Are they all passed to Mustache templates? If that is the case I would prefer changing the respective Mustache templates instead. Three curly braces, i. e. {{{a}}} instead of {{a}}, cause a to be rendered without additional escaping.

[christianp]

Ah, I didn't know about that. I've removed this commit from my branch and pushed a new one, but that doesn't seem to have updated this PR. I'll close this and make a new one.