[Flow] Fluid escaping interceptor not called when rendering view helpers with shorthand syntax

Helmut Hummel helmut.hummel at typo3.org
Tue Jul 1 12:19:54 CEST 2014


Hey!

I recently stumbled over this:

{f:uri.action(action: 'list', arguments: {a:'b'})}
<f:uri.action action="list" arguments ="{a:'b'}" />

both produce the same result where & is not html escaped.

While I would understand this to be the case for the regular syntax, I 
would expect that Fluid calls the escaping interceptor when using the 
shorthand syntax.

Currently it is necessary to always wrap the uri vh with a 
format.htmlentities vh which is kind of ugly ;)

Am I missing something here?

Kind regards,
Helmut

-- 
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 Core Developer, TYPO3 Security Team Member

TYPO3 .... inspiring people to share!
Get involved: typo3.org


More information about the Flow mailing list