A fragment render request: validates the template and slot, then calls
Engine.renderFragment and returns an Envelope for fetch
responses and partial updates.
Remarks
The engine looks the template up in its cache, checks the fragments
allowlist, binds params, stamps the current time and, when signing is on,
signs the v2 message. A template outside the allowlist is reported exactly
like a missing one (NOT_FOUND).
Values are not HTML-escaped unless the engine runs with escape: true:
escape untrusted input with escapeHtml before binding it.
A fragment render request: validates the template and slot, then calls Engine.renderFragment and returns an Envelope for
fetchresponses and partial updates.Remarks
The engine looks the template up in its cache, checks the
fragmentsallowlist, bindsparams, stamps the current time and, when signing is on, signs the v2 message. A template outside the allowlist is reported exactly like a missing one (NOT_FOUND).Values are not HTML-escaped unless the engine runs with
escape: true: escape untrusted input with escapeHtml before binding it.Example