[Flow] Fluid escaping interceptor not called when rendering view helpers with shorthand syntax

Helmut Hummel helmut.hummel at typo3.org
Wed Jul 2 22:05:36 CEST 2014


Hi Bastian,

On 01.07.14 14:14, Bastian Waidelich wrote:
> Helmut Hummel wrote:
>
>> {f:uri.action(action: 'list', arguments: {a:'b'})}
>
> The shorthand syntax is not correct like this, it should be:
> {f:uri.action(action: 'list', arguments: '{a: \'b\'}')}

Well, this is off topic to my question, and while I'm not sure what is 
technically more correct

{f:uri.action(action: 'list', arguments: {a:'b'})}

works as well as

{f:uri.action(action: 'list', arguments: '{a: \'b\'}')}

>> both produce the same result where & is not html escaped.
>
> That should be the case, and it is for me:

Yes, it is the case also for me. What I am saying is that it might not 
be what a user might expect.

Kind regards,
Helmut

-- 
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 Core Developer, TYPO3 Security Team Member

TYPO3 .... inspiring people to share!
Get involved: typo3.org


More information about the Flow mailing list