geckon01/Twig
1
0
Fork 0
mirror of https://github.com/twigphp/Twig.git synced 2026-09-14 19:36:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix automatic escaping documentation

Browse Source
This commit is contained in:
nikic
2010-12-11 23:24:38 +01:00
committed by Fabien Potencier
parent 4bfa8df5f7
commit 6e1f5f7b54
1 changed files with 3 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/02-Twig-for-Template-Designers.markdown
+3 -12
View File
@@ -380,20 +380,11 @@ will include characters that affect the resulting HTML. There are two
approaches: manually escaping each variable or automatically escaping
everything by default.
Twig supports both, but what is used depends on the application configuration.
The default configuration is no automatic escaping for various reasons:
* Escaping everything except of safe values will also mean that Twig is
escaping variables known to not include HTML such as numbers which is a
huge performance hit.
* The information about the safety of a variable is very fragile. It could
happen that by coercing safe and unsafe values the return value is double
escaped HTML.
Twig supports both, automatic escaping is enabled by default.
>**NOTE**
>Escaping is only supported if the *escaper* extension has been enabled (which
>is the default).
>Automatic escaping is only supported if the *escaper* extension
>has been enabled (which is the default).
### Working with Manual Escaping