[Flow] Fluid escaping interceptor not called when rendering view helpers with shorthand syntax
Helmut Hummel
helmut.hummel at typo3.org
Tue Jul 1 12:19:54 CEST 2014
Hey!
I recently stumbled over this:
{f:uri.action(action: 'list', arguments: {a:'b'})}
<f:uri.action action="list" arguments ="{a:'b'}" />
both produce the same result where & is not html escaped.
While I would understand this to be the case for the regular syntax, I
would expect that Fluid calls the escaping interceptor when using the
shorthand syntax.
Currently it is necessary to always wrap the uri vh with a
format.htmlentities vh which is kind of ugly ;)
Am I missing something here?
Kind regards,
Helmut
--
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 Core Developer, TYPO3 Security Team Member
TYPO3 .... inspiring people to share!
Get involved: typo3.org
More information about the Flow
mailing list