Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

As per twigphp/Twig#472, automatic escaping is not yet available #5121

Closed
wants to merge 2 commits into from

Conversation

Ocramius
Copy link
Contributor

While it would be a cool feature, it is also impossible to apply automatic escaping in most cases.
Advertising this as a out-of-the-box feature is problematic, as it probably mislead multiple developers
that are using the tool without applying proper contextual escaping.

Ref: twigphp/Twig#472

While it would be a cool feature, it is also impossible to apply automatic escaping in most cases.
Advertising this as a out-of-the-box feature is problematic, as it probably mislead multiple developers
that are using the tool without applying proper contextual escaping.
@wouterj
Copy link
Member

wouterj commented Mar 27, 2015

Well, it is automatic in a way that it always escapes your variables unless you use the |raw filter.

@stof
Copy link
Member

stof commented Mar 27, 2015

We should keep the mention of automatic output escaping though (contextual escaping is indeed not supported by the auto-escaper)

@Ocramius
Copy link
Contributor Author

Then I got mislead by the wording. I'll reword it to fix my misconception.

@wouterj
Copy link
Member

wouterj commented Mar 29, 2015

Thanks Marco!

wouterj added a commit that referenced this pull request Mar 29, 2015
…ailable (Ocramius)

This PR was submitted for the 2.7 branch but it was merged into the 2.3 branch instead (closes #5121).

Discussion
----------

As per twigphp/Twig#472, automatic escaping is not yet available

While it would be a cool feature, it is also impossible to apply automatic escaping in most cases.
Advertising this as a out-of-the-box feature is problematic, as it probably mislead multiple developers
that are using the tool without applying proper contextual escaping.

Ref: twigphp/Twig#472

Commits
-------

94a8655 As per twigphp/Twig#472, automatic escaping is not yet available
@wouterj wouterj closed this Mar 29, 2015
@Ocramius Ocramius deleted the patch-2 branch March 29, 2015 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants