[Flow] Fluid escaping interceptor not called when rendering view helpers with shorthand syntax
Helmut Hummel
helmut.hummel at typo3.org
Wed Jul 2 22:05:36 CEST 2014
Hi Bastian,
On 01.07.14 14:14, Bastian Waidelich wrote:
> Helmut Hummel wrote:
>
>> {f:uri.action(action: 'list', arguments: {a:'b'})}
>
> The shorthand syntax is not correct like this, it should be:
> {f:uri.action(action: 'list', arguments: '{a: \'b\'}')}
Well, this is off topic to my question, and while I'm not sure what is
technically more correct
{f:uri.action(action: 'list', arguments: {a:'b'})}
works as well as
{f:uri.action(action: 'list', arguments: '{a: \'b\'}')}
>> both produce the same result where & is not html escaped.
>
> That should be the case, and it is for me:
Yes, it is the case also for me. What I am saying is that it might not
be what a user might expect.
Kind regards,
Helmut
--
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 Core Developer, TYPO3 Security Team Member
TYPO3 .... inspiring people to share!
Get involved: typo3.org
More information about the Flow
mailing list