We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
{var $hack = "<script>alert('test');</script>"} {_"Insert hack %param% to website", array( 'param' => $hack, )}
If we don't add helper "|noescape", we expect that all parameters of translator will be escaped like in documentation.
Fix should be probably here?
The text was updated successfully, but these errors were encountered:
Temporary workaround can lool like the following.
{var $hack = "<script>alert('test');</script>"} {capture $params['param']}{$hack}{/capture} {_"Insert hack %param% to website", $params}
Sorry, something went wrong.
It should be solved in latte macros, probably here @enumag Any ideas how could we apply latte filters to node args?
I didn't play around with latte macros for a long time so no idea.
No branches or pull requests
If we don't add helper "|noescape", we expect that all parameters of translator will be escaped like in documentation.
Fix should be probably here?
The text was updated successfully, but these errors were encountered: