Exercise 3: Confirming Escaped vs. Raw Output — Possible Solution
====================================================================

SETUP
------------------------------
A page row stored with:

  body: "<p>Regular text with <strong>bold emphasis</strong>.</p>"

TEST A — <%= %>
------------------------------
<div><%= page.body %></div>

Renders as literal visible text on the page:

  <p>Regular text with <strong>bold emphasis</strong>.</p>

with the angle brackets shown as plain characters - nothing renders
bold, and no real <p>/<strong> elements exist in the DOM.

TEST B — <%- %>
------------------------------
<div><%- page.body %></div>

Renders as real, parsed HTML - "Regular text with bold emphasis."
appears on the page with "bold emphasis" genuinely bold, and
inspecting the page's own HTML source shows real <p> and <strong>
elements in the DOM.

WHY THIS WORKS AS AN ANSWER
------------------------------
It correctly demonstrates that <%= %> HTML-escapes its output by
default, printing tags as literal text, while <%- %> outputs the
identical string as real, unescaped HTML - concrete proof of EJS's
own two-tier output model, and of why <%- %> is the deliberate,
necessary choice for rendering page.body.