mirror of
https://github.com/twigphp/Twig.git
synced 2026-09-11 18:06:46 +00:00
added doc for the sandbox tag
This commit is contained in:
@@ -41,7 +41,7 @@ You can disable access to the context by appending the ``only`` keyword:
|
||||
|
||||
When including a template created by an end user, you should consider
|
||||
sandboxing it. More information in the :doc:`Twig for Developers<../api>`
|
||||
chapter.
|
||||
chapter and in the :doc:`<sandbox>` tag documentation.
|
||||
|
||||
The template name can be any valid Twig expression:
|
||||
|
||||
|
||||
@@ -0,0 +1,30 @@
|
||||
``sandbox``
|
||||
===========
|
||||
|
||||
The ``sandbox`` tag can be used to enable the sandboxing mode for an included
|
||||
template, when sandboxing is not enabled globally for the Twig environment::
|
||||
|
||||
.. code-block:: jinja
|
||||
|
||||
{% sandbox %}
|
||||
{% include 'user.html' %}
|
||||
{% endsandbox %}
|
||||
|
||||
.. warning::
|
||||
|
||||
The ``sandbox`` tag is only available when the sandbox extension is
|
||||
enabled (see the :doc:`Twig for Developers<../api>` chapter).
|
||||
|
||||
.. note::
|
||||
|
||||
The ``sandbox`` tag can only be used to sandbox an include tag and it
|
||||
cannot be used to sandbox a section of a template. The following example
|
||||
won't work for example::
|
||||
|
||||
.. code-block:: jinja
|
||||
|
||||
{% sandbox %}
|
||||
{% for i in 1..2 %}
|
||||
{{ i }}
|
||||
{% endfor %}
|
||||
{% endsandbox %}
|
||||
Reference in New Issue
Block a user