Fix Docs: explain blitz.auto_escape ini parameter, pseudo-filters and anti-XSS approach
Opened this issue · 0 comments
alexeyrybak commented
Explain: (1) blitz.auto_escape (2) pseudo-filters (3) anti-XSS practices
{{ $html | raw }} when blitz.auto_escape = 1
{{ $var | escape }} when blitz.auto_escape = 0 (0 by default!)
{{ $var | nl2br }}