[FLOW3-general] Security framework for escaping/ encoding output?

[Bastian Waidelich]

Bastian Waidelich wrote:

> What I could imagine is some kind of ESAPI viewhelper that you could use
> something like this
>
> {name -> f:security.esapiJavaScript()}

Well, probably more like

{name -> f:security.esapi(codec: 'JavaScript')}

which is btw the same as

<f:security.esapi codec="JavaScript">
{name}
</f:security.esapi>