package main import ( "html/template" "log" "os" ) type Foo struct{ Bar string } func main() { tmpl, err := template.New("home").Parse(` `) if err != nil { log.Fatalf("could not parse: %v", err) } foo := Foo{"haha onclick=evil()"} if err := tmpl.Execute(os.Stdout, foo); err != nil { log.Fatalf("could not execute: %v", err) } }